last executing test programs: 8.340191016s ago: executing program 4 (id=390): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000180)={0x20, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000cc0)={0x0, 0xb, 0x1a, "f0e2b85558c0973cf08c4eb3c06d37eb478c1c7e121910c56457"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x7, 0x2, 0x2}, 0x0, 0x0, &(0x7f0000000f00)={0x40, 0xf, 0x2, 0xe}, &(0x7f0000000f40)={0x40, 0x13, 0x6, @link_local}, 0x0, &(0x7f0000000fc0)={0x40, 0x19, 0x2, "cc71"}, 0x0, 0x0, 0x0, 0x0}) 4.238791996s ago: executing program 4 (id=430): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'pim6reg1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x4e20, @local}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) 4.158723788s ago: executing program 4 (id=436): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x400c5, 0x5) 3.995509522s ago: executing program 3 (id=438): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}]}, 0x1, 0x453, &(0x7f0000000300)="$eJzs3M2PE+UfAPDvTLfw2x/grogvvKiraNz4sssCKgcPajTxgImJHvS42V0IUljDrokQomAMnowx8W48+i940osxnky86t2QEMMF8FQz7czSlrbslnaL9vNJBp5n5pk+z7czT/vMPJ0NYGRNZf8kEdsj4veImKhnmwtM1f+7fvX8wo2r5xeSqFbf/iuplbt29fxCUbTYb1uemU4j0s+S2Num3pWz507OVypLZ/L87OqpD2ZXzp577sSp+eNLx5dOHzxy5PChuRdfOPh8X+LM2nRtz8fL+3a/8d5Xbx79oin+ljj6ZKrbxier1T5XN1w7GtLJ2BAbwoaUIiI7XOVa/5+IUtw8eBPx+qdDbRwwUNVqtbqt8+YLVeA/LInmvC4Po6L4os+uf4uldRDw8uCGH0N35ZX6BVAW9/V8qW8ZizQvU265vu2nqYh498Lf32RLDOY+BABAkx+y8c+z7cZ/aTzQUO6efG5oMiLujYidEXFfROyKiPsjamUfjIiHNlh/6yTJreOf9HJPga1TNv57KZ/bah7/FaO/mCzluR21+MvJsROVpQP5ezId5a1Zfq5LHT++9tuXnbY1jv+yJau/GAvm7bg8trV5n8X51fk7ibnRlYsRe8baxZ+szQQkEbE7Ivb0WMeJp7/b12nb7ePvog/zTNVvI56qH/8L0RJ/Iek+Pzn7v6gsHZgtzopb/fLrpbc61X9H8fdBdvz/3/b8X4t/Mmmcr13ZeB2X/vi84zVNr+f/luSdWnpLvu6j+dXVM3MRW5Kj9UY3rj94c98iX5TP4p/e377/74yb78TeiMhO4ocj4pGIeDRv+2MR8XhE7O8S/8+vPvF+7/EPVhb/4oaO/1piPKJlTYdE6eRP3zdVOnlL/De6H//DtdR0vmY9n3/raVdvZzMAAAD8+6QRsT2SdGYtnaYzM/Xfy++KSCvLK6vPHFv+8PRi/RmBySinxZ2uiYb7oXP5ZX09fzEi6j8tKLYfyu8bf10ar+VnFpYri8MOHkbcttosRl1j/8/8WRpeu4BN4nktGF36P4wu/R9Gl/4Po6tN/x8fRjuAzZf1/9Y/s/XJkNoCbK6W73/TfjBCXP/D6NL/YXTp/zCSVsbj9g/Jd00Ur9Tj7ndTotrPF4zysMMZbCLSu6IZEgNKDPdzCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoF/+CQAA///E5ODv") connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10023, 0x0) unshare(0x64000400) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 3.173026342s ago: executing program 1 (id=450): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) socket(0x10, 0x3, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) truncate(&(0x7f0000000100)='./file0\x00', 0x0) 3.004923857s ago: executing program 3 (id=451): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xaa000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'pim6reg1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x4e20, @local}}) 2.903736279s ago: executing program 3 (id=452): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x1810004, &(0x7f00000001c0)={[{@discard_unit_segment}, {@nogc_merge}, {@acl}, {@disable_roll_forward}, {@lfs_mode}, {@fsync_mode_posix}, {@segment_mode}, {@heap}, {@discard_unit_segment}, {@noacl}, {@nolazytime}, {@data_flush}, {@jqfmt_vfsold}, {@block_mode}, {@inline_data}]}, 0xfd, 0x552d, &(0x7f000000cf00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x65) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.359272162s ago: executing program 3 (id=457): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2008406, &(0x7f00000000c0), 0x1, 0x560, &(0x7f0000000440)="$eJzs3c9vI1cdAPDvTH42u212oQeogF2gsKDV2htvu6p6abmAUFWpouLEYRsSbxTWXi+xU5oQifRvAAkkTvAncEDigNQTB24ckTgAohyQCkSgDRIHoxlPEjdxWLN2bDb+fKTZ+fFm5vuevTPv+dmZF8DEuhoRuxExGxFvRcRisT0ppni1M2X7PdzbWdnf21lJot1+829Jnp5ti65jMheKc85HxNe+EvHN5GTc5tb2veVarbpRrJdb9Qfl5tb2jfX68lp1rXq/Urm9dPvmS7derAytrFfqP/vgy+uvff2Xv/jk+7/Z/eJ3s2xdLNK6yzFMnaLPHMbJTEfEa2cRbAymivnsmPPB40kj4iMR8Zn8+l+Mqfx/JwBwnrXbi9Fe7F4HAM67NO8DS9JSRKRp0Qgodfrwno2FtNZotq7fbWzeX+30lV2KmfTueq168/Lc776d7zyTZOtLeVqenq9Xjq3fiojLEfGDuafy9dJKo7Y6niYPAEy8C931f0T8cy5NS6W+Du3xrR4A8MSYH3cGAICRU/8DwORR/wPA5Omj/i++7N8987wAAKPh8z8ATB71PwBMHvU/AEyUN15/PZva+8Xzr1ff3tq813j7xmq1ea9U31wprTQ2HpTWGo21/Jk99Uedr9ZoPFh6ITbfKbeqzVa5ubV9p97YvN+6kz/X+051ZiSlAgD+m8tX3vttEhG7Lz+VT9E1loO6Gs63dIh7AU+WqUEO1kCAJ5rRvmBy9VWF542EX595XoDx6Pkw7/meix/2o/8hiN8Zwf+Vax/vv//fGM9wvujZh8n1eP3/rww9H8DoPXb//x+Gmw9g9Nrt5PiY/7OHSd3eGOWoxADAWRrgJ3zt7w2rEQKM1aMG8x7K9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwzlyMiG9FkpbyscDT7N+0VIp4OiIuxUxyd71WvRkRz8SViJiZy9aXxp1pAGBA6V+SYvyva4vPXzyeOpv8ay6fR8R3fvzmD99ZbrU2lrLtfz/cPncwfFjl6LgBxhUEAPr3p352yuvvSjHv+iD/cG9n5WA6wzye8MGXDgcfXdnf28mnTsp0tNvtdsR83pZY+EcS08Ux8xHxXERMDSH+7rsR8bFe5U/yvpFLxcin3fGjiP30SOOnH4qf5mmdefbyfXQIeYFJ8152/3m11/WXxtV83vv6n8/vUIPL73/zEQf3vv2u+NNFpKke8bNr/mq/MV741VdPbGwvdtLejXhuulf85DB+ckr85/uM//tPfOr7r5yS1v5JxLXoHb87VrlVf1Bubm3fWK8vr1XXqvcrldtLt2++dOvFSjnvoy4f9FSf9NeXrz9zWt6y8i+cEr/zzl84Vv7Zw2M/12f5f/rvt77x6aPVuePxv/DZ3u//s/m89+uf1Ymf7zP+8sLPTx2+O4u/ekr5H/X+X+8z/vt/3l7tc1cAYASaW9v3lmu16sZAC9mn0GGc58RClsX+dj5oLg4W9I+RLxy9LEkkMexyZY2xfnaeOatX9cwXpg/bisM44VRnYaE45YiLkw6pFIMtxKVi4eGogo7nfgSMztFFP+6cAAAAAAAAAAAAAAAApxnF3zCNu4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcX/8JAAD//7a0vsc=") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x43) 2.214107906s ago: executing program 1 (id=462): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0xe0, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x2, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0xd, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) io_setup(0x1, 0x0) getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000001600)) 2.144997398s ago: executing program 3 (id=467): futex(0xffffffffffffffff, 0x8, 0x2, 0x0, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x2) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x4, 0xfdfbff7d, 0x7, 0x2, "0c41920887e8d2b7921105000000000000006b", 0x4, 0x203}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4e8, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xff000000, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x3ff, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 882.339769ms ago: executing program 3 (id=475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) 656.888294ms ago: executing program 4 (id=478): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2008406, &(0x7f00000000c0), 0x1, 0x560, &(0x7f0000000440)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x43) 656.821634ms ago: executing program 0 (id=479): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) 411.87108ms ago: executing program 1 (id=481): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x4c, 0x0, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x38, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40810}, 0x4008000) sendto(0xffffffffffffffff, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 296.565892ms ago: executing program 1 (id=482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000f80)=ANY=[@ANYBLOB="40000000020201040000000000003600020000022c0002"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x24004004) 296.392643ms ago: executing program 0 (id=483): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) socket$inet(0xa, 0x801, 0x84) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x15) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x800) readv(r2, &(0x7f0000003480)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1) 235.670934ms ago: executing program 0 (id=484): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001940)=[{&(0x7f0000000040)="97452a307eb495fe2236000000000000006bfadf302e815cb994e6d0", 0x1c}, {&(0x7f0000000940)="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", 0x4c3}], 0x2, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @loopback}}}], 0x20}, 0x0) 235.350994ms ago: executing program 0 (id=485): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GETFSUUID(r2, 0x80047453, 0x0) 235.002824ms ago: executing program 2 (id=486): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x280030, &(0x7f0000000300)={[], [{@pcr={'pcr', 0x3d, 0x25}}]}, 0x6, 0x263, &(0x7f0000000ac0)="$eJzs3D9oJFUcB/DfzO4mJlklaiOIf0BENBBSCjaxUQiIBBFBhYiIjZIIMWKXtbKx0FollU0UO6OlpAnXHFybu0uRa664cMWFK+6KPXZnN7e3u+GS281OuPl8YJg3M2/4vQnzfZNiZwIorOmImI+IUkTMREQlIpLODi9ny3Rrc2NiZymiXv/gZtLsl21n2udNRUQtIt6MiO00ia/KEd9tfbJ/e/fd135aq7z6x9bHEyO9yJaD/b33Dn9//8d/Fp5p7ZmPaqvVeR3DlPTueuIs6pwnSTnvEXASi9//fbmR+2cj4pVm/iuRxmTz2M+rY9uVeOO348795cal50c5VmD46vVK4xlYqwOFk0ZENZJ0NiKydprOzmb/w18pTaZfr6x+O/PlytryF3nPVMCwVCP23vlv/N+prvxfL2X57/Xn6AcJnNaTJ+nUyP+Hi5tXG+3D0pmPCTgPXshWjfzPfLb+esg/FI78Q3HJPxSX/ENxDSX/48MdEzAanv9QDP1+cC7/8BirtBu1voflH4pL/qG45B+KqzP/AECx1MfzfgMZyEve8w8AAAAAAAAAAAAAAAAAANBrY2Jnqb0c7UzbjbP5QNiFXyMO3o6Icr/6pVb57OvFk7eSRrcjSXZaH2Mnrv/pS4OMfnB/5fz29VPX8q1/8cV8668vR9R+iIi5crn3/kvu3/6P6OmHHK98PmCBU0q6tt/6aLT1u93dzLf+wm7E/435Z67f/JPGc811//mn2vmJ5Qd0/5WP982dQUYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKN0LAAD//xFhayM=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x355, &(0x7f0000000500)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x1, 0x0, 0x3, 0x8, 0x200000000000006, 0x9, 0x3, 0xf64, 0xa2}) 215.793745ms ago: executing program 1 (id=487): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}]}, 0x1, 0x453, &(0x7f0000000300)="$eJzs3M2PE+UfAPDvTLfw2x/grogvvKiraNz4sssCKgcPajTxgImJHvS42V0IUljDrokQomAMnowx8W48+i940osxnky86t2QEMMF8FQz7czSlrbslnaL9vNJBp5n5pk+z7czT/vMPJ0NYGRNZf8kEdsj4veImKhnmwtM1f+7fvX8wo2r5xeSqFbf/iuplbt29fxCUbTYb1uemU4j0s+S2Num3pWz507OVypLZ/L87OqpD2ZXzp577sSp+eNLx5dOHzxy5PChuRdfOPh8X+LM2nRtz8fL+3a/8d5Xbx79oin+ljj6ZKrbxier1T5XN1w7GtLJ2BAbwoaUIiI7XOVa/5+IUtw8eBPx+qdDbRwwUNVqtbqt8+YLVeA/LInmvC4Po6L4os+uf4uldRDw8uCGH0N35ZX6BVAW9/V8qW8ZizQvU265vu2nqYh498Lf32RLDOY+BABAkx+y8c+z7cZ/aTzQUO6efG5oMiLujYidEXFfROyKiPsjamUfjIiHNlh/6yTJreOf9HJPga1TNv57KZ/bah7/FaO/mCzluR21+MvJsROVpQP5ezId5a1Zfq5LHT++9tuXnbY1jv+yJau/GAvm7bg8trV5n8X51fk7ibnRlYsRe8baxZ+szQQkEbE7Ivb0WMeJp7/b12nb7ePvog/zTNVvI56qH/8L0RJ/Iek+Pzn7v6gsHZgtzopb/fLrpbc61X9H8fdBdvz/3/b8X4t/Mmmcr13ZeB2X/vi84zVNr+f/luSdWnpLvu6j+dXVM3MRW5Kj9UY3rj94c98iX5TP4p/e377/74yb78TeiMhO4ocj4pGIeDRv+2MR8XhE7O8S/8+vPvF+7/EPVhb/4oaO/1piPKJlTYdE6eRP3zdVOnlL/De6H//DtdR0vmY9n3/raVdvZzMAAAD8+6QRsT2SdGYtnaYzM/Xfy++KSCvLK6vPHFv+8PRi/RmBySinxZ2uiYb7oXP5ZX09fzEi6j8tKLYfyu8bf10ar+VnFpYri8MOHkbcttosRl1j/8/8WRpeu4BN4nktGF36P4wu/R9Gl/4Po6tN/x8fRjuAzZf1/9Y/s/XJkNoCbK6W73/TfjBCXP/D6NL/YXTp/zCSVsbj9g/Jd00Ur9Tj7ndTotrPF4zysMMZbCLSu6IZEgNKDPdzCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoF/+CQAA///E5ODv") connect$can_bcm(r0, &(0x7f00000005c0), 0x10) unshare(0x64000400) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 199.948655ms ago: executing program 0 (id=488): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f00000000c0)) 146.277976ms ago: executing program 0 (id=489): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x400c5, 0x5) 145.938067ms ago: executing program 2 (id=490): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x17b87}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4) 135.069146ms ago: executing program 2 (id=491): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2008406, &(0x7f00000000c0), 0x1, 0x560, &(0x7f0000000440)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x43) 109.540737ms ago: executing program 4 (id=492): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f"], 0x5000) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 64.307049ms ago: executing program 2 (id=493): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 63.861918ms ago: executing program 2 (id=494): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) 553.07µs ago: executing program 1 (id=495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x402000, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r3], 0x108}}], 0x2, 0xc040) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0x2, 0x2, 0x4, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x1, 0xb, 0x5, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 380.1µs ago: executing program 2 (id=496): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001940)=[{&(0x7f0000000040)="97452a307eb495fe2236000000000000006bfadf302e815cb994e6d0", 0x1c}, {&(0x7f0000000940)="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", 0x4c3}], 0x2, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @loopback}}}], 0x20}, 0x0) 0s ago: executing program 4 (id=497): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x82002) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup3(r2, r1, 0x80000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x3, 0x8, 0x40, 0x42, 0x1}, 0x50) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/fib_triestat\x00') writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="e5", 0x1}], 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts. [ 17.992319][ T28] audit: type=1400 audit(1784903966.728:64): avc: denied { mounton } for pid=265 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 17.993365][ T265] cgroup: Unknown subsys name 'net' [ 17.995350][ T28] audit: type=1400 audit(1784903966.728:65): avc: denied { mount } for pid=265 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 17.999093][ T28] audit: type=1400 audit(1784903966.728:66): avc: denied { unmount } for pid=265 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 17.999201][ T265] cgroup: Unknown subsys name 'devices' [ 18.120843][ T265] cgroup: Unknown subsys name 'hugetlb' [ 18.126438][ T265] cgroup: Unknown subsys name 'rlimit' [ 18.228289][ T28] audit: type=1400 audit(1784903966.958:67): avc: denied { setattr } for pid=265 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.251506][ T28] audit: type=1400 audit(1784903966.958:68): avc: denied { mounton } for pid=265 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 18.259891][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 18.276428][ T28] audit: type=1400 audit(1784903966.958:69): avc: denied { mount } for pid=265 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 18.307930][ T28] audit: type=1400 audit(1784903967.028:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.333426][ T28] audit: type=1400 audit(1784903967.028:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.364989][ T28] audit: type=1400 audit(1784903967.098:72): avc: denied { read } for pid=265 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.390505][ T28] audit: type=1400 audit(1784903967.098:73): avc: denied { open } for pid=265 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.390722][ T265] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.149799][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.156850][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.164338][ T288] device bridge_slave_0 entered promiscuous mode [ 19.173964][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.181254][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.188653][ T288] device bridge_slave_1 entered promiscuous mode [ 19.208857][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.215899][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.223356][ T287] device bridge_slave_0 entered promiscuous mode [ 19.232931][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.240058][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.247448][ T287] device bridge_slave_1 entered promiscuous mode [ 19.260080][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.267111][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.274471][ T289] device bridge_slave_0 entered promiscuous mode [ 19.281404][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.288423][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.295854][ T289] device bridge_slave_1 entered promiscuous mode [ 19.356962][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.364022][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.371424][ T291] device bridge_slave_0 entered promiscuous mode [ 19.380227][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.387265][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.396676][ T290] device bridge_slave_0 entered promiscuous mode [ 19.406004][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.413089][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.421059][ T290] device bridge_slave_1 entered promiscuous mode [ 19.427616][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.434862][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.442191][ T291] device bridge_slave_1 entered promiscuous mode [ 19.604815][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.611880][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.619177][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.626194][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.640504][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.647543][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.654815][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.661835][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.676037][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.683085][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.690342][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.697348][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.709694][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.716737][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.723997][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.731023][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.746633][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.753680][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.760941][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.767947][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.814362][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.821759][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.829510][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.837007][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.844405][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.851727][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.859234][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.866352][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.874000][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.881215][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.888386][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.895640][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.913366][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.921181][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.929367][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.936387][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.944432][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.952694][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.959720][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.967015][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.974469][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.983491][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.991851][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.998887][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.007067][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.014554][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.033275][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.041489][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.048500][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.055891][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.064731][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.071764][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.079300][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.087175][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.095180][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.103477][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.110506][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.117818][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.126122][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.133164][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.151757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.160121][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.168200][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.175226][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.182650][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 20.191225][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.199447][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.207897][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.218527][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.227032][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.235470][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.242525][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.250022][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.258017][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.266072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.274160][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.282168][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.290179][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.313036][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.321257][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.329425][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.337388][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.345650][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.353949][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.361982][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.370121][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.377978][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.386380][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.406230][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.414307][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.422305][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.431417][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.441303][ T290] device veth0_vlan entered promiscuous mode [ 20.448950][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.456937][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.472747][ T289] device veth0_vlan entered promiscuous mode [ 20.480349][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.489332][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.496692][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.504274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.512892][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.521277][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.529325][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.537223][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.544787][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.552765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.560734][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.570335][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.577835][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.587872][ T291] device veth0_vlan entered promiscuous mode [ 20.595026][ T288] device veth0_vlan entered promiscuous mode [ 20.602519][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.611181][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.619713][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.627653][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.635224][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.650393][ T291] device veth1_macvtap entered promiscuous mode [ 20.660230][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.668421][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.676656][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.689726][ T290] device veth1_macvtap entered promiscuous mode [ 20.698184][ T287] device veth0_vlan entered promiscuous mode [ 20.707030][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.714920][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.723320][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.731656][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.739582][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.747479][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.755764][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.764659][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.772221][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.785034][ T288] device veth1_macvtap entered promiscuous mode [ 20.792774][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.801122][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.809487][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.818266][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.827052][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.836280][ T289] device veth1_macvtap entered promiscuous mode [ 20.851291][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.859219][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.867375][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.875868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.884257][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.892728][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.900999][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.919725][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.927977][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.937672][ T290] request_module fs-gadgetfs succeeded, but still no fs? [ 20.938210][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.953361][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.972672][ T287] device veth1_macvtap entered promiscuous mode [ 20.991312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.005427][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.018565][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.020536][ T315] loop2: detected capacity change from 0 to 256 [ 21.042407][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.066545][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.111537][ T318] loop1: detected capacity change from 0 to 1024 [ 21.115349][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.135330][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.210094][ T318] EXT4-fs: Ignoring removed nomblk_io_submit option [ 21.237193][ T318] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 21.304889][ T318] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 21.330201][ T333] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 21.371168][ T334] usb usb8: usbfs: process 334 (syz.0.1) did not claim interface 0 before use [ 23.065258][ T337] loop4: detected capacity change from 0 to 40427 [ 23.073518][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 23.073572][ T28] audit: type=1400 audit(1784903970.548:111): avc: denied { create } for pid=328 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.104368][ T337] F2FS-fs (loop4): invalid crc value [ 23.405333][ T346] loop0: detected capacity change from 0 to 512 [ 23.412058][ T346] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 23.501837][ T337] F2FS-fs (loop4): Found nat_bits in checkpoint [ 23.603085][ T337] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 24.152487][ T28] audit: type=1400 audit(1784903970.678:112): avc: denied { create } for pid=328 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 24.174506][ T28] audit: type=1400 audit(1784903971.588:113): avc: denied { ioctl } for pid=328 comm="syz.4.7" path="socket:[15896]" dev="sockfs" ino=15896 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 24.239259][ T336] syz.4.7 (336) used greatest stack depth: 21768 bytes left [ 24.299010][ T28] audit: type=1400 audit(1784903971.588:114): avc: denied { write } for pid=328 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 24.334637][ T28] audit: type=1400 audit(1784903971.588:115): avc: denied { nlmsg_write } for pid=328 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 24.371902][ T359] loop2: detected capacity change from 0 to 128 [ 24.372479][ T355] I/O error, dev loop5, sector 140737496743808 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 24.388967][ T28] audit: type=1400 audit(1784903971.678:116): avc: denied { mount } for pid=317 comm="syz.1.2" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 24.514000][ T361] futex_wake_op: syz.3.11 tries to shift op by 144; fix this program [ 25.335809][ T369] loop4: detected capacity change from 0 to 512 [ 25.342598][ T369] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 25.344553][ T28] audit: type=1400 audit(1784903972.098:117): avc: denied { write } for pid=317 comm="syz.1.2" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.377912][ T28] audit: type=1400 audit(1784903972.108:118): avc: denied { add_name } for pid=317 comm="syz.1.2" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.401304][ T355] I/O error, dev loop5, sector 140737496743808 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.412311][ T355] Buffer I/O error on dev loop5p17, logical block 17592187092976, async page read [ 25.436363][ T288] EXT4-fs (loop1): unmounting filesystem. [ 25.488918][ T28] audit: type=1400 audit(1784903972.108:119): avc: denied { create } for pid=317 comm="syz.1.2" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 25.507658][ T371] loop3: detected capacity change from 0 to 256 [ 25.515440][ T28] audit: type=1400 audit(1784903972.118:120): avc: denied { read write } for pid=317 comm="syz.1.2" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 25.549193][ T371] exfat: Bad value for 'uid' [ 25.575437][ T353] loop0: detected capacity change from 0 to 40427 [ 25.581393][ T377] loop1: detected capacity change from 0 to 1024 [ 25.588547][ T353] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 25.589552][ T377] EXT4-fs: Ignoring removed nomblk_io_submit option [ 25.597350][ T353] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 25.621909][ T377] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 25.724981][ T353] F2FS-fs (loop0): Image doesn't support compression [ 25.876588][ T381] overlayfs: unrecognized mount option "dont_appraise" or missing value [ 25.914388][ T353] F2FS-fs (loop0): Image doesn't support compression [ 25.944406][ T353] F2FS-fs (loop0): invalid crc value [ 25.951268][ T353] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 26.161058][ T385] loop3: detected capacity change from 0 to 512 [ 26.167687][ T385] EXT4-fs: Ignoring removed nobh option [ 26.558603][ T385] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.571700][ T385] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 26.585804][ T385] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 26.866569][ T385] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 26.874811][ T385] System zones: 1-12 [ 26.888864][ T385] EXT4-fs (loop3): orphan cleanup on readonly fs [ 26.896639][ T385] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:511: comm syz.3.14: Block bitmap for bg 0 marked uninitialized [ 26.911601][ T385] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:511: comm syz.3.14: Block bitmap for bg 0 marked uninitialized [ 26.925305][ T385] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:511: comm syz.3.14: Block bitmap for bg 0 marked uninitialized [ 26.939865][ T385] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 26.953685][ T385] EXT4-fs (loop3): 1 truncate cleaned up [ 26.959401][ T385] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 27.049565][ T377] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 27.097292][ T391] loop2: detected capacity change from 0 to 128 [ 27.204091][ T353] F2FS-fs (loop0): Start checkpoint disabled! [ 27.211299][ T287] EXT4-fs (loop3): unmounting filesystem. [ 27.244584][ T353] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 28.124965][ T392] loop4: detected capacity change from 0 to 40427 [ 28.139079][ T392] F2FS-fs (loop4): invalid crc value [ 28.358782][ T392] F2FS-fs (loop4): Found nat_bits in checkpoint [ 28.751499][ T392] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 29.806793][ T288] EXT4-fs (loop1): unmounting filesystem. [ 29.989703][ T402] loop3: detected capacity change from 0 to 40427 [ 30.019185][ T402] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 30.039671][ T413] loop1: detected capacity change from 0 to 4096 [ 30.069850][ T413] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 30.094125][ T416] loop4: detected capacity change from 0 to 4096 [ 30.103304][ T402] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 30.111674][ T402] F2FS-fs (loop3): Image doesn't support compression [ 30.118363][ T402] F2FS-fs (loop3): Image doesn't support compression [ 30.126233][ T402] F2FS-fs (loop3): invalid crc value [ 30.132366][ T402] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 30.132572][ T416] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 30.154673][ T413] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 30.161892][ T402] F2FS-fs (loop3): Start checkpoint disabled! [ 30.168873][ T413] System zones: 0-5 [ 30.179200][ T402] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 30.179512][ T416] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 30.194594][ T416] System zones: 0-5 [ 30.197927][ T413] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 30.209515][ T416] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 30.649968][ T429] Zero length message leads to an empty skb [ 31.197548][ T424] loop0: detected capacity change from 0 to 40427 [ 31.223050][ T424] F2FS-fs (loop0): invalid crc value [ 31.248957][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 31.248993][ T28] audit: type=1400 audit(1784903979.958:138): avc: denied { read write open } for pid=412 comm="syz.1.22" path="/2/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.451516][ T424] F2FS-fs (loop0): Found nat_bits in checkpoint [ 31.549925][ T424] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 32.171996][ T288] EXT4-fs (loop1): unmounting filesystem. [ 32.239657][ T437] loop3: detected capacity change from 0 to 1024 [ 32.819183][ T437] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.819347][ T441] loop2: detected capacity change from 0 to 1024 [ 32.838068][ T437] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.849619][ T441] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.858504][ T441] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.873898][ T443] loop1: detected capacity change from 0 to 512 [ 32.878885][ T28] audit: type=1400 audit(1784903981.608:139): avc: denied { create } for pid=444 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 32.880820][ T443] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.905228][ T445] loop0: detected capacity change from 0 to 512 [ 32.976436][ T290] EXT4-fs (loop4): unmounting filesystem. [ 32.994193][ T441] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 32.998124][ T437] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 33.065637][ T445] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 33.074583][ T28] audit: type=1400 audit(1784903981.808:140): avc: denied { create } for pid=454 comm="syz.4.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.099021][ T445] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.160559][ T28] audit: type=1400 audit(1784903981.888:141): avc: denied { append } for pid=444 comm="syz.0.25" path="/4/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.206845][ T445] SELinux: Context ¼OPcÕÇ™»žÅè?‰sÞ Uâ²Éì^tú”Q`wê& ò˜m [ 33.206845][ T445] ¤ù¡ ×%ÓZÊó®Ç@L0õNïµr‘L²1X‹)Ù’i†jÏÉ’%Ø‘ÙfËíîYjwõÔLݘ»ã8ôÇݱá bV:±vÓiý is not valid (left unmapped). [ 33.227280][ T28] audit: type=1400 audit(1784903981.968:142): avc: denied { relabelto } for pid=444 comm="syz.0.25" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=BC1A4F065063D5C799BB9EC5E83F897381DE0C55E2B2C908EC5E74FA169414516077EA189D15260CF2986D0AA4F9A10CD725D35ACAF3AEC7404C141A30F54EEFB572910D4CB231588B0F29D992690186156ACF02C9920125D89110D966CBEDEE7F596A77F5D44CDD8D98BBE338F4C7DD1BB1E10B6216563AB176D3690FFD09 [ 33.295051][ T445] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 33.324274][ T28] audit: type=1400 audit(1784903982.018:143): avc: denied { setopt } for pid=444 comm="syz.0.25" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.402910][ T289] EXT4-fs (loop0): unmounting filesystem. [ 33.540887][ T462] loop0: detected capacity change from 0 to 1024 [ 33.547455][ T459] loop4: detected capacity change from 0 to 40427 [ 33.557743][ T462] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.569646][ T459] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 33.580064][ T462] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.592221][ T459] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 33.602966][ T459] F2FS-fs (loop4): Image doesn't support compression [ 33.609946][ T459] F2FS-fs (loop4): Image doesn't support compression [ 33.617125][ T459] F2FS-fs (loop4): invalid crc value [ 33.656350][ T459] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 33.681370][ T28] audit: type=1400 audit(1784903982.418:144): avc: denied { read write } for pid=465 comm="syz.1.31" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 33.682711][ T462] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.705234][ T28] audit: type=1400 audit(1784903982.418:145): avc: denied { open } for pid=465 comm="syz.1.31" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 33.705260][ T28] audit: type=1400 audit(1784903982.418:146): avc: denied { ioctl } for pid=465 comm="syz.1.31" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 33.790891][ T28] audit: type=1400 audit(1784903982.528:147): avc: denied { create } for pid=465 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.819335][ T459] F2FS-fs (loop4): Start checkpoint disabled! [ 33.859802][ T459] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 33.899094][ T459] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 33.908364][ T459] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 34.077529][ T459] syz.4.29: attempt to access beyond end of device [ 34.077529][ T459] loop4: rw=2049, sector=53248, nr_sectors = 3320 limit=40427 [ 34.100947][ T291] EXT4-fs (loop2): unmounting filesystem. [ 34.127887][ T289] EXT4-fs (loop0): unmounting filesystem. [ 34.192734][ T43] kworker/u4:2: attempt to access beyond end of device [ 34.192734][ T43] loop4: rw=1, sector=53248, nr_sectors = 16 limit=40427 [ 34.208300][ T43] kworker/u4:2: attempt to access beyond end of device [ 34.208300][ T43] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 34.274326][ T475] loop2: detected capacity change from 0 to 40427 [ 34.288766][ T475] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 34.296198][ T475] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 34.309650][ T475] F2FS-fs (loop2): Image doesn't support compression [ 34.316532][ T475] F2FS-fs (loop2): Image doesn't support compression [ 34.326960][ T475] F2FS-fs (loop2): invalid crc value [ 34.343897][ T475] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 34.409447][ T475] F2FS-fs (loop2): Start checkpoint disabled! [ 34.425197][ T482] loop4: detected capacity change from 0 to 1024 [ 34.431735][ T475] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 34.443814][ T475] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 34.451005][ T475] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 34.458647][ T482] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.507003][ T482] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.555930][ T482] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 34.572991][ T474] syz.2.32: attempt to access beyond end of device [ 34.572991][ T474] loop2: rw=2049, sector=53248, nr_sectors = 2048 limit=40427 [ 34.594449][ T475] syz.2.32: attempt to access beyond end of device [ 34.594449][ T475] loop2: rw=2049, sector=55296, nr_sectors = 2048 limit=40427 [ 34.643114][ T475] syz.2.32: attempt to access beyond end of device [ 34.643114][ T475] loop2: rw=2049, sector=94208, nr_sectors = 1560 limit=40427 [ 34.708424][ T386] kworker/u4:6: attempt to access beyond end of device [ 34.708424][ T386] loop2: rw=1, sector=53248, nr_sectors = 16 limit=40427 [ 34.722507][ T386] kworker/u4:6: attempt to access beyond end of device [ 34.722507][ T386] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 34.834614][ T491] loop2: detected capacity change from 0 to 4096 [ 34.856567][ T491] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.895967][ T491] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 34.907433][ T491] System zones: 0-5 [ 34.915686][ T491] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.130988][ T495] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 35.140715][ T495] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.358223][ T290] EXT4-fs (loop4): unmounting filesystem. [ 36.472802][ T289] EXT4-fs (loop0): unmounting filesystem. [ 36.501813][ T291] EXT4-fs (loop2): unmounting filesystem. [ 36.657046][ T506] set_capacity_and_notify: 1 callbacks suppressed [ 36.657064][ T506] loop0: detected capacity change from 0 to 40427 [ 36.682780][ T506] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 36.683943][ T287] EXT4-fs (loop3): unmounting filesystem. [ 36.694662][ T506] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 36.704206][ T506] F2FS-fs (loop0): Image doesn't support compression [ 36.726592][ T506] F2FS-fs (loop0): Image doesn't support compression [ 36.729767][ T515] loop3: detected capacity change from 0 to 512 [ 36.734079][ T506] F2FS-fs (loop0): invalid crc value [ 36.745713][ T506] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 36.760465][ T515] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 36.769512][ T515] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.773332][ T506] F2FS-fs (loop0): Start checkpoint disabled! [ 36.787934][ T506] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 36.800043][ T506] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 36.807183][ T506] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 36.821785][ T287] EXT4-fs (loop3): unmounting filesystem. [ 36.843083][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 36.843095][ T28] audit: type=1400 audit(1784903985.578:156): avc: denied { prog_run } for pid=519 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.943331][ T506] syz.0.39: attempt to access beyond end of device [ 36.943331][ T506] loop0: rw=2049, sector=53248, nr_sectors = 2872 limit=40427 [ 36.961105][ T506] syz.0.39: attempt to access beyond end of device [ 36.961105][ T506] loop0: rw=2049, sector=56120, nr_sectors = 1224 limit=40427 [ 37.126568][ T525] xt_CT: No such helper "syz0" [ 37.263696][ T527] loop0: detected capacity change from 0 to 512 [ 37.298209][ T527] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 37.316217][ T527] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.335015][ T28] audit: type=1400 audit(1784903986.068:157): avc: denied { read } for pid=526 comm="syz.0.44" path="/9/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=BC1A4F065063D5C799BB9EC5E83F897381DE0C55E2B2C908EC5E74FA169414516077EA189D15260CF2986D0AA4F9A10CD725D35ACAF3AEC7404C141A30F54EEFB572910D4CB231588B0F29D992690186156ACF02C9920125D89110D966CBEDEE7F596A77F5D44CDD8D98BBE338F4C7DD1BB1E10B6216563AB176D3690FFD09 [ 37.335966][ T527] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 37.572285][ T289] EXT4-fs (loop0): unmounting filesystem. [ 37.605334][ T540] loop4: detected capacity change from 0 to 4096 [ 38.206052][ T543] loop2: detected capacity change from 0 to 40427 [ 38.225774][ T543] F2FS-fs (loop2): invalid crc value [ 38.292629][ T540] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.377428][ T543] F2FS-fs (loop2): Found nat_bits in checkpoint [ 38.467245][ T543] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 38.558810][ C1] sched: RT throttling activated [ 38.580989][ T548] loop0: detected capacity change from 0 to 256 [ 38.588362][ T540] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 38.740032][ T540] System zones: 0-5 [ 38.752552][ T540] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 39.282911][ T290] EXT4-fs (loop4): unmounting filesystem. [ 39.405482][ T564] loop4: detected capacity change from 0 to 4096 [ 39.421560][ T564] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.434968][ T564] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 39.443363][ T564] System zones: 0-5 [ 39.453919][ T564] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 39.599091][ T568] loop0: detected capacity change from 0 to 1024 [ 39.623482][ T568] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.704135][ T568] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 39.860831][ T568] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.010590][ T582] loop3: detected capacity change from 0 to 4096 [ 40.023474][ T582] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.047504][ T582] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 40.064914][ T582] System zones: 0-5 [ 40.076821][ T582] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 40.103023][ T587] loop2: detected capacity change from 0 to 1024 [ 40.123081][ T587] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.190704][ T587] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 40.212403][ T587] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 40.284721][ T290] EXT4-fs (loop4): unmounting filesystem. [ 41.241076][ T287] EXT4-fs (loop3): unmounting filesystem. [ 41.447164][ T289] EXT4-fs (loop0): unmounting filesystem. [ 41.965652][ T610] loop0: detected capacity change from 0 to 40427 [ 41.976958][ T616] xt_CT: No such helper "syz0" [ 41.990823][ T610] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 42.009979][ T610] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 42.026865][ T610] F2FS-fs (loop0): Image doesn't support compression [ 42.041187][ T610] F2FS-fs (loop0): Image doesn't support compression [ 42.056560][ T610] F2FS-fs (loop0): invalid crc value [ 42.069168][ T610] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 42.130460][ T610] F2FS-fs (loop0): Start checkpoint disabled! [ 42.143516][ T610] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 42.165667][ T610] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 42.177112][ T610] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 42.295632][ T291] EXT4-fs (loop2): unmounting filesystem. [ 42.362584][ T619] loop4: detected capacity change from 0 to 1024 [ 42.379722][ T623] loop2: detected capacity change from 0 to 512 [ 42.409573][ T623] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 42.447984][ T619] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.612579][ T630] loop1: detected capacity change from 0 to 40427 [ 42.625273][ T630] F2FS-fs (loop1): invalid crc value [ 42.709949][ T619] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.726445][ T630] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.806892][ T623] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.822843][ T630] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 43.164047][ T619] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 43.568643][ T610] bio_check_eod: 6 callbacks suppressed [ 43.568665][ T610] syz.0.68: attempt to access beyond end of device [ 43.568665][ T610] loop0: rw=2049, sector=53248, nr_sectors = 2080 limit=40427 [ 43.571584][ T623] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 43.577163][ T610] syz.0.68: attempt to access beyond end of device [ 43.577163][ T610] loop0: rw=2049, sector=55328, nr_sectors = 272 limit=40427 [ 43.665789][ T291] EXT4-fs (loop2): unmounting filesystem. [ 43.715345][ T386] kworker/u4:6: attempt to access beyond end of device [ 43.715345][ T386] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 43.733379][ T639] loop2: detected capacity change from 0 to 512 [ 43.777870][ T639] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.808410][ T639] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.069003][ T28] audit: type=1400 audit(1784903992.718:158): avc: denied { accept } for pid=643 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 44.907447][ T291] EXT4-fs (loop2): unmounting filesystem. [ 44.996810][ T653] loop2: detected capacity change from 0 to 512 [ 45.041940][ T648] loop0: detected capacity change from 0 to 40427 [ 45.054914][ T648] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 45.091932][ T648] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 45.112073][ T648] F2FS-fs (loop0): Image doesn't support compression [ 45.127303][ T648] F2FS-fs (loop0): Image doesn't support compression [ 45.134159][ T653] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 45.134497][ T648] F2FS-fs (loop0): invalid crc value [ 45.148699][ T653] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.155906][ T648] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 45.187717][ T648] F2FS-fs (loop0): Start checkpoint disabled! [ 45.196932][ T648] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 45.204688][ T648] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 45.212026][ T648] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 46.181562][ T290] EXT4-fs (loop4): unmounting filesystem. [ 46.252251][ T663] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 46.325617][ T666] loop3: detected capacity change from 0 to 1024 [ 46.349228][ T666] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.370943][ T666] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 46.435327][ T648] syz.0.74: attempt to access beyond end of device [ 46.435327][ T648] loop0: rw=2049, sector=53248, nr_sectors = 2064 limit=40427 [ 46.446666][ T670] loop4: detected capacity change from 0 to 1024 [ 46.457759][ T291] EXT4-fs (loop2): unmounting filesystem. [ 46.469993][ T666] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 46.483263][ T670] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.490311][ T648] syz.0.74: attempt to access beyond end of device [ 46.490311][ T648] loop0: rw=2049, sector=55312, nr_sectors = 2032 limit=40427 [ 46.505706][ T648] syz.0.74: attempt to access beyond end of device [ 46.505706][ T648] loop0: rw=2049, sector=49152, nr_sectors = 8 limit=40427 [ 46.512479][ T670] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 46.523522][ T648] syz.0.74: attempt to access beyond end of device [ 46.523522][ T648] loop0: rw=2049, sector=49192, nr_sectors = 2064 limit=40427 [ 46.549197][ T648] syz.0.74: attempt to access beyond end of device [ 46.549197][ T648] loop0: rw=2049, sector=51256, nr_sectors = 1992 limit=40427 [ 46.572234][ T648] syz.0.74: attempt to access beyond end of device [ 46.572234][ T648] loop0: rw=2049, sector=57344, nr_sectors = 4072 limit=40427 [ 46.607159][ T648] syz.0.74: attempt to access beyond end of device [ 46.607159][ T648] loop0: rw=2049, sector=61416, nr_sectors = 4120 limit=40427 [ 46.638627][ T670] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 46.701427][ T677] loop1: detected capacity change from 0 to 256 [ 46.985783][ T683] loop2: detected capacity change from 0 to 4096 [ 47.161214][ T683] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.689458][ T683] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 47.697594][ T683] System zones: 0-5 [ 47.709586][ T683] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 47.831883][ T287] EXT4-fs (loop3): unmounting filesystem. [ 50.687645][ T697] loop1: detected capacity change from 0 to 1024 [ 50.694330][ T290] EXT4-fs (loop4): unmounting filesystem. [ 50.694831][ T697] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.701042][ T291] EXT4-fs (loop2): unmounting filesystem. [ 50.714147][ T697] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 50.812026][ T702] loop4: detected capacity change from 0 to 512 [ 50.849299][ T702] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 50.868407][ T702] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.879784][ T697] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 50.930395][ T709] overlayfs: unrecognized mount option "dont_appraise" or missing value [ 50.962493][ T702] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 51.036456][ T290] EXT4-fs (loop4): unmounting filesystem. [ 51.150014][ T711] xt_CT: No such helper "syz0" [ 51.243533][ T718] loop4: detected capacity change from 0 to 512 [ 51.250311][ T718] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.715027][ T725] overlayfs: unrecognized mount option "dont_appraise" or missing value [ 52.185947][ T732] loop3: detected capacity change from 0 to 512 [ 52.192667][ T732] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.334127][ T731] loop4: detected capacity change from 0 to 40427 [ 52.363977][ T736] loop0: detected capacity change from 0 to 4096 [ 52.398086][ T28] audit: type=1400 audit(1784904001.128:159): avc: denied { remount } for pid=730 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.425471][ T736] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.434390][ T288] EXT4-fs (loop1): unmounting filesystem. [ 54.490088][ T736] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 54.518467][ T736] System zones: 0-5 [ 54.533430][ T736] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 54.673253][ T748] loop1: detected capacity change from 0 to 1024 [ 54.689716][ T748] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.709915][ T748] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 55.040104][ T289] EXT4-fs (loop0): unmounting filesystem. [ 55.066767][ T748] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 55.110620][ T755] loop0: detected capacity change from 0 to 128 [ 55.246762][ T747] loop4: detected capacity change from 0 to 40427 [ 55.284044][ T747] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 55.313828][ T747] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 55.388929][ T747] F2FS-fs (loop4): Image doesn't support compression [ 55.395649][ T747] F2FS-fs (loop4): Image doesn't support compression [ 55.419857][ T747] F2FS-fs (loop4): invalid crc value [ 55.429692][ T747] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 55.472428][ T761] loop3: detected capacity change from 0 to 512 [ 55.479159][ T761] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.508132][ T747] F2FS-fs (loop4): Start checkpoint disabled! [ 55.536737][ T747] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 55.552783][ T747] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 55.560563][ T747] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 55.739523][ T747] bio_check_eod: 1520 callbacks suppressed [ 55.739590][ T747] syz.4.98: attempt to access beyond end of device [ 55.739590][ T747] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 55.832069][ T760] loop2: detected capacity change from 0 to 40427 [ 55.839162][ T10] kworker/u4:1: attempt to access beyond end of device [ 55.839162][ T10] loop4: rw=1, sector=53248, nr_sectors = 8 limit=40427 [ 55.854378][ T760] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 55.862203][ T320] kworker/u4:5: attempt to access beyond end of device [ 55.862203][ T320] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 55.900226][ T760] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 55.929277][ T760] F2FS-fs (loop2): Image doesn't support compression [ 55.936060][ T760] F2FS-fs (loop2): Image doesn't support compression [ 55.950325][ T760] F2FS-fs (loop2): invalid crc value [ 55.960233][ T760] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 56.818547][ T760] F2FS-fs (loop2): Start checkpoint disabled! [ 56.869135][ T760] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 56.902558][ T760] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 56.936369][ T28] audit: type=1400 audit(1784904005.668:160): avc: denied { read write } for pid=773 comm="syz.3.104" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.942209][ T760] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 56.968252][ T288] EXT4-fs (loop1): unmounting filesystem. [ 57.039013][ T778] loop1: detected capacity change from 0 to 1024 [ 57.052603][ T28] audit: type=1400 audit(1784904005.728:161): avc: denied { open } for pid=773 comm="syz.3.104" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.079257][ T778] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.098920][ T778] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 57.116254][ T28] audit: type=1400 audit(1784904005.728:162): avc: denied { ioctl } for pid=773 comm="syz.3.104" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.147915][ T760] syz.2.101: attempt to access beyond end of device [ 57.147915][ T760] loop2: rw=2049, sector=53248, nr_sectors = 2192 limit=40427 [ 57.167312][ T760] syz.2.101: attempt to access beyond end of device [ 57.167312][ T760] loop2: rw=2049, sector=55440, nr_sectors = 1904 limit=40427 [ 57.187525][ T760] syz.2.101: attempt to access beyond end of device [ 57.187525][ T760] loop2: rw=2049, sector=98304, nr_sectors = 2400 limit=40427 [ 57.201926][ T778] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 57.218921][ T760] syz.2.101: attempt to access beyond end of device [ 57.218921][ T760] loop2: rw=2049, sector=100704, nr_sectors = 1696 limit=40427 [ 57.238912][ T760] syz.2.101: attempt to access beyond end of device [ 57.238912][ T760] loop2: rw=2049, sector=49152, nr_sectors = 8 limit=40427 [ 57.258891][ T637] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 57.263513][ T760] syz.2.101: attempt to access beyond end of device [ 57.263513][ T760] loop2: rw=2049, sector=49192, nr_sectors = 2048 limit=40427 [ 57.311358][ T760] syz.2.101: attempt to access beyond end of device [ 57.311358][ T760] loop2: rw=2049, sector=51240, nr_sectors = 2008 limit=40427 [ 57.391496][ T786] loop0: detected capacity change from 0 to 256 [ 57.409490][ T312] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.439959][ T637] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.458849][ T637] usb 4-1: config 0 has no interfaces? [ 57.469345][ T637] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 57.487237][ T637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.519589][ T637] usb 4-1: config 0 descriptor?? [ 57.659380][ T312] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.678840][ T312] usb 5-1: config 0 has no interfaces? [ 57.684399][ T312] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 57.786011][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.794728][ T312] usb 5-1: config 0 descriptor?? [ 57.806895][ T791] loop2: detected capacity change from 0 to 4096 [ 57.816911][ T794] loop0: detected capacity change from 0 to 1024 [ 57.825045][ T794] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.843975][ T794] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 57.855503][ T791] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.864529][ T791] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 57.872815][ T791] System zones: 0-5 [ 57.878430][ T794] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 57.887398][ T791] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 57.927958][ T321] usb 4-1: USB disconnect, device number 2 [ 58.297718][ T409] usb 5-1: USB disconnect, device number 2 [ 58.429420][ T805] loop3: detected capacity change from 0 to 4096 [ 58.456812][ T805] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.472040][ T805] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 58.484314][ T805] System zones: 0-5 [ 58.495035][ T805] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 58.957068][ T291] EXT4-fs (loop2): unmounting filesystem. [ 58.992774][ T811] loop4: detected capacity change from 0 to 1024 [ 59.009170][ T811] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.016943][ T811] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 59.035370][ T813] loop2: detected capacity change from 0 to 4096 [ 59.070587][ T813] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.081960][ T811] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 59.135055][ T813] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 59.143548][ T813] System zones: 0-5 [ 59.154954][ T289] EXT4-fs (loop0): unmounting filesystem. [ 59.161373][ T813] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 59.297709][ T287] EXT4-fs (loop3): unmounting filesystem. [ 59.315687][ T819] loop0: detected capacity change from 0 to 4096 [ 59.373575][ T819] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.595003][ T822] loop3: detected capacity change from 0 to 4096 [ 59.609506][ T822] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.624063][ T819] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 59.633808][ T288] EXT4-fs (loop1): unmounting filesystem. [ 59.648183][ T819] System zones: 0-5 [ 59.648957][ T822] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 59.664473][ T819] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 59.669547][ T822] System zones: 0-5 [ 59.698057][ T822] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 59.791983][ T829] futex_wake_op: syz.1.116 tries to shift op by 144; fix this program [ 60.776550][ T291] EXT4-fs (loop2): unmounting filesystem. [ 62.829590][ T846] overlayfs: unrecognized mount option "dont_appraise" or missing value [ 62.905237][ T848] loop0: detected capacity change from 0 to 4096 [ 62.917023][ T848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.926466][ T848] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 62.934768][ T848] System zones: 0-5 [ 63.039491][ T852] loop3: detected capacity change from 0 to 4096 [ 63.065194][ T852] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.088503][ T852] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 63.097071][ T321] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 63.104763][ T852] System zones: 0-5 [ 63.111049][ T852] EXT4-fs mount: 4 callbacks suppressed [ 63.111064][ T852] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 63.474717][ T321] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.489471][ T321] usb 2-1: config 0 has no interfaces? [ 63.495005][ T321] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 63.504299][ T321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.519023][ T321] usb 2-1: config 0 descriptor?? [ 63.825344][ T289] EXT4-fs (loop0): unmounting filesystem. [ 63.867959][ T287] EXT4-fs (loop3): unmounting filesystem. [ 63.924421][ T864] xt_CT: No such helper "syz0" [ 63.980153][ T872] loop3: detected capacity change from 0 to 4096 [ 64.015527][ T872] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.028659][ T341] usb 2-1: USB disconnect, device number 2 [ 64.059730][ T872] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 64.093637][ T872] System zones: 0-5 [ 64.184734][ T872] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 66.599464][ T885] loop1: detected capacity change from 0 to 4096 [ 66.626875][ T885] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.656908][ T885] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 66.669470][ T287] EXT4-fs (loop3): unmounting filesystem. [ 66.703312][ T885] System zones: 0-5 [ 66.709220][ T885] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 69.643173][ T891] loop3: detected capacity change from 0 to 40427 [ 69.708650][ T891] F2FS-fs (loop3): invalid crc value [ 69.733002][ T288] EXT4-fs (loop1): unmounting filesystem. [ 69.821141][ T891] F2FS-fs (loop3): Found nat_bits in checkpoint [ 69.859726][ T891] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 69.874277][ T903] loop1: detected capacity change from 0 to 4096 [ 69.924688][ T904] loop0: detected capacity change from 0 to 4096 [ 69.941947][ T903] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.960829][ T904] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.977657][ T903] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 69.990893][ T903] System zones: 0-5 [ 69.995801][ T904] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 70.005539][ T904] System zones: 0-5 [ 70.005638][ T903] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 70.051550][ T904] [ 70.099074][ T904] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 70.935215][ T288] EXT4-fs (loop1): unmounting filesystem. [ 70.970001][ T919] loop2: detected capacity change from 0 to 1024 [ 70.986390][ T919] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.023643][ T919] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 71.047034][ T921] loop1: detected capacity change from 0 to 1024 [ 71.056617][ T921] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.065034][ T921] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 71.080622][ T922] loop3: detected capacity change from 0 to 512 [ 71.087361][ T922] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.107064][ T289] EXT4-fs (loop0): unmounting filesystem. [ 71.130392][ T919] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 71.141816][ T921] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 71.918560][ T28] audit: type=1400 audit(1784904020.648:163): avc: denied { block_suspend } for pid=937 comm="syz.3.138" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.108435][ T950] loop0: detected capacity change from 0 to 256 [ 72.118722][ T950] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d) [ 72.137205][ T28] audit: type=1400 audit(1784904020.868:164): avc: denied { write } for pid=949 comm="syz.0.142" name="file0" dev="loop0" ino=1048615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.168564][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 72.189342][ T28] audit: type=1400 audit(1784904020.868:165): avc: denied { remove_name } for pid=949 comm="syz.0.142" name="file0" dev="loop0" ino=1048616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.200367][ T955] loop4: detected capacity change from 0 to 128 [ 72.223552][ T952] device bridge_slave_0 left promiscuous mode [ 72.309048][ T952] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.319779][ T952] device bridge_slave_1 left promiscuous mode [ 72.380405][ T962] loop3: detected capacity change from 0 to 512 [ 72.387126][ T962] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.426880][ T952] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.438505][ T957] netlink: 'syz.0.143': attribute type 10 has an invalid length. [ 72.446397][ T28] audit: type=1400 audit(1784904020.868:166): avc: denied { rename } for pid=949 comm="syz.0.142" name="file0" dev="loop0" ino=1048616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.474968][ T28] audit: type=1400 audit(1784904020.868:167): avc: denied { add_name } for pid=949 comm="syz.0.142" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.499070][ T28] audit: type=1400 audit(1784904020.878:168): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 72.848935][ T28] audit: type=1400 audit(1784904020.988:169): avc: denied { ioctl } for pid=951 comm="syz.0.143" path="socket:[17382]" dev="sockfs" ino=17382 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.439387][ T978] loop4: detected capacity change from 0 to 40427 [ 73.463524][ T978] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 73.478509][ T978] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 73.496364][ T978] F2FS-fs (loop4): Image doesn't support compression [ 73.510846][ T978] F2FS-fs (loop4): Image doesn't support compression [ 73.534530][ T978] F2FS-fs (loop4): invalid crc value [ 73.547432][ T978] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 73.604957][ T978] F2FS-fs (loop4): Start checkpoint disabled! [ 73.618966][ T978] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 73.636141][ T978] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 73.647625][ T978] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 73.804710][ T978] bio_check_eod: 1521 callbacks suppressed [ 73.804727][ T978] syz.4.149: attempt to access beyond end of device [ 73.804727][ T978] loop4: rw=2049, sector=53248, nr_sectors = 2056 limit=40427 [ 73.872361][ T978] syz.4.149: attempt to access beyond end of device [ 73.872361][ T978] loop4: rw=2049, sector=55304, nr_sectors = 2040 limit=40427 [ 73.908855][ T291] EXT4-fs (loop2): unmounting filesystem. [ 73.932194][ T978] syz.4.149: attempt to access beyond end of device [ 73.932194][ T978] loop4: rw=2049, sector=106496, nr_sectors = 2096 limit=40427 [ 73.991199][ T288] EXT4-fs (loop1): unmounting filesystem. [ 74.003263][ T978] syz.4.149: attempt to access beyond end of device [ 74.003263][ T978] loop4: rw=2049, sector=108592, nr_sectors = 2000 limit=40427 [ 74.008680][ T988] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.022550][ T978] syz.4.149: attempt to access beyond end of device [ 74.022550][ T978] loop4: rw=2049, sector=69632, nr_sectors = 1376 limit=40427 [ 74.062417][ T988] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 74.070647][ T988] System zones: 0-5 [ 74.075081][ T988] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 74.092366][ T995] bridge0: port 1(syz_tun) entered blocking state [ 74.119926][ T995] bridge0: port 1(syz_tun) entered disabled state [ 74.131244][ T995] device syz_tun entered promiscuous mode [ 74.138523][ T995] bridge0: port 1(syz_tun) entered blocking state [ 74.145002][ T995] bridge0: port 1(syz_tun) entered forwarding state [ 74.161194][ T997] futex_wake_op: syz.1.153 tries to shift op by 144; fix this program [ 74.477338][ T43] kworker/u4:2: attempt to access beyond end of device [ 74.477338][ T43] loop4: rw=1, sector=53248, nr_sectors = 8 limit=40427 [ 74.492817][ T43] kworker/u4:2: attempt to access beyond end of device [ 74.492817][ T43] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 74.679255][ T28] audit: type=1400 audit(1784904023.418:170): avc: denied { bind } for pid=1008 comm="syz.3.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.713442][ T28] audit: type=1400 audit(1784904023.438:171): avc: denied { setopt } for pid=1008 comm="syz.3.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.737103][ T28] audit: type=1400 audit(1784904023.468:172): avc: denied { ioctl } for pid=1010 comm="syz.3.160" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18557 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.787026][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.794189][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.817888][ T1015] set_capacity_and_notify: 1 callbacks suppressed [ 74.817903][ T1015] loop0: detected capacity change from 0 to 512 [ 74.831509][ T1015] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.872657][ T291] EXT4-fs (loop2): unmounting filesystem. [ 74.916198][ T1014] device erspan0 entered promiscuous mode [ 74.923431][ T1014] device macsec1 entered promiscuous mode [ 74.940297][ T1014] device erspan0 left promiscuous mode [ 74.981319][ T1021] loop1: detected capacity change from 0 to 512 [ 75.096022][ T1021] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 75.105620][ T1021] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.259355][ T288] EXT4-fs (loop1): unmounting filesystem. [ 75.347765][ T1031] loop4: detected capacity change from 0 to 256 [ 75.376352][ T1030] loop1: detected capacity change from 0 to 256 [ 75.398277][ T1031] loop4: detected capacity change from 0 to 256 [ 75.405865][ T1031] exfat: Deprecated parameter 'namecase' [ 75.411667][ T1031] exfat: Deprecated parameter 'namecase' [ 75.423862][ T1030] exfat: Deprecated parameter 'utf8' [ 75.429793][ T1030] exfat: Deprecated parameter 'namecase' [ 75.435722][ T1030] exfat: Deprecated parameter 'namecase' [ 75.442692][ T1030] exfat: Deprecated parameter 'namecase' [ 75.462855][ T1031] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 76.140756][ T1033] loop3: detected capacity change from 0 to 1024 [ 76.150044][ T1019] loop2: detected capacity change from 0 to 40427 [ 76.162321][ T1030] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 76.211713][ T1019] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 76.225560][ T1019] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 76.269758][ T1033] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 76.325016][ T1019] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 76.340882][ T1039] loop4: detected capacity change from 0 to 512 [ 76.352054][ T1043] EXT4-fs (loop3): shut down requested (1) [ 76.380627][ T1039] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 76.399624][ T1039] EXT4-fs (loop4): 1 truncate cleaned up [ 76.407173][ T287] EXT4-fs (loop3): unmounting filesystem. [ 76.413818][ T1039] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 76.442771][ T1039] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 76.449070][ T1019] F2FS-fs (loop2): Found nat_bits in checkpoint [ 76.475685][ T290] EXT4-fs (loop4): unmounting filesystem. [ 76.482570][ T1041] loop1: detected capacity change from 0 to 40427 [ 76.486189][ T1049] loop3: detected capacity change from 0 to 2048 [ 76.496452][ T1041] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 76.509683][ T1041] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 76.527121][ T1041] F2FS-fs (loop1): invalid crc value [ 76.538752][ T1019] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 76.571126][ T1019] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 76.612249][ T1049] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 76.641989][ T287] EXT4-fs (loop3): unmounting filesystem. [ 76.657787][ T1041] F2FS-fs (loop1): Found nat_bits in checkpoint [ 76.697331][ T1041] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 76.704630][ T1041] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 76.729092][ T1064] ======================================================= [ 76.729092][ T1064] WARNING: The mand mount option has been deprecated and [ 76.729092][ T1064] and is ignored by this kernel. Remove the mand [ 76.729092][ T1064] option from the mount to silence this warning. [ 76.729092][ T1064] ======================================================= [ 76.744714][ T1041] syz.1.168: attempt to access beyond end of device [ 76.744714][ T1041] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 76.778686][ T320] loop: Write error at byte offset 9223372036867358719, length 4096. [ 77.739398][ C0] I/O error, dev loop2, sector 24576 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 77.752403][ T320] loop: Write error at byte offset 9223372036858966015, length 4096. [ 77.762281][ T1064] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 77.774410][ C0] I/O error, dev loop2, sector 8184 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 77.802708][ T320] loop: Write error at byte offset 9223372036856872959, length 4096. [ 77.814000][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 77.814012][ T28] audit: type=1400 audit(1784904026.548:193): avc: denied { setattr } for pid=1063 comm="syz.3.173" name="file0" dev="loop3" ino=1048622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.823900][ C1] I/O error, dev loop2, sector 4096 op 0x1:(WRITE) flags 0x3800 phys_seg 5 prio class 2 [ 77.852638][ T1062] F2FS-fs (loop2): do_checkpoint failed err:-5, stop checkpoint [ 77.880711][ T288] syz-executor: attempt to access beyond end of device [ 77.880711][ T288] loop1: rw=2051, sector=45096, nr_sectors = 24 limit=40427 [ 77.883205][ T1074] exfat: Deprecated parameter 'utf8' [ 77.895201][ T288] F2FS-fs (loop1): Issue discard(5637, 5637, 3) failed, ret: -5 [ 77.936027][ T1077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.178'. [ 77.950215][ T1074] exfat: Deprecated parameter 'namecase' [ 77.958645][ T1074] exfat: Deprecated parameter 'utf8' [ 77.979382][ T1074] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 78.424236][ T1080] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 78.463656][ T1080] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 78.475956][ T28] audit: type=1400 audit(1784904027.208:194): avc: denied { relabelto } for pid=1071 comm="syz.4.177" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 79.025333][ T290] EXT4-fs (loop4): unmounting filesystem. [ 79.037541][ T28] audit: type=1400 audit(1784904027.768:195): avc: denied { associate } for pid=1073 comm="syz.3.176" name="memory.events.local" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 79.077906][ T28] audit: type=1400 audit(1784904027.798:196): avc: denied { read append open } for pid=1073 comm="syz.3.176" path=2F33342FE91F7189591E9233614B2F6D656D6F72792E6576656E74732E6C6F63616C dev="loop3" ino=1048623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.148555][ T28] audit: type=1400 audit(1784904027.868:197): avc: denied { sqpoll } for pid=1090 comm="syz.3.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 79.487379][ T1093] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 79.515088][ T1093] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 79.543469][ T1093] F2FS-fs (loop4): Image doesn't support compression [ 79.553515][ T1093] F2FS-fs (loop4): Image doesn't support compression [ 79.567810][ T1093] F2FS-fs (loop4): invalid crc value [ 79.579791][ T1093] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 79.657117][ T1108] overlayfs: failed to resolve './file0': -2 [ 79.666602][ T28] audit: type=1400 audit(1784904028.398:198): avc: denied { create } for pid=1102 comm="syz.2.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 79.693437][ T1093] F2FS-fs (loop4): Start checkpoint disabled! [ 79.712398][ T1093] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 79.734481][ T1093] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 79.745441][ T1093] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 79.779899][ T28] audit: type=1400 audit(1784904028.518:199): avc: denied { read write } for pid=1111 comm="syz.0.188" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 79.827433][ T28] audit: type=1400 audit(1784904028.518:200): avc: denied { open } for pid=1111 comm="syz.0.188" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 79.886055][ T28] audit: type=1400 audit(1784904028.558:201): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 79.926201][ T316] kworker/u4:4: attempt to access beyond end of device [ 79.926201][ T316] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 79.949630][ T28] audit: type=1400 audit(1784904028.618:202): avc: denied { create } for pid=1092 comm="syz.4.182" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 80.418964][ T551] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 80.505311][ T1085] set_capacity_and_notify: 5 callbacks suppressed [ 80.505329][ T1085] loop1: detected capacity change from 0 to 131072 [ 80.531002][ T1085] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945) [ 80.540630][ T1085] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 80.549417][ T1085] F2FS-fs (loop1): invalid crc value [ 80.569228][ T1085] F2FS-fs (loop1): Found nat_bits in checkpoint [ 80.608727][ T1085] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 80.615915][ T1085] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 80.624515][ T551] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.642878][ T551] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 80.664087][ T551] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.678173][ T551] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.686358][ T551] usb 5-1: Product: syz [ 80.740962][ T551] usb 5-1: Manufacturer: syz [ 80.752151][ T551] usb 5-1: SerialNumber: syz [ 80.758753][ T551] cdc_acm: probe of 5-1:1.0 failed with error -22 [ 81.324780][ T409] usb 5-1: USB disconnect, device number 3 [ 82.576756][ T1145] 9pnet_fd: p9_fd_create_tcp (1145): problem connecting socket to 127.0.0.1 [ 83.392257][ T1156] loop3: detected capacity change from 0 to 256 [ 83.404795][ T1156] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 84.281439][ T1164] loop3: detected capacity change from 0 to 131072 [ 84.329754][ T1164] F2FS-fs (loop3): invalid crc value [ 84.485106][ T1164] F2FS-fs (loop3): Found nat_bits in checkpoint [ 84.526279][ T1164] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 85.322256][ T1190] tmpfs: Bad value for 'size' [ 85.353027][ T1192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.212'. [ 85.906240][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 85.906263][ T28] audit: type=1400 audit(1784904034.638:209): avc: denied { read } for pid=1206 comm="syz.3.218" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.916046][ T19] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.973459][ T28] audit: type=1400 audit(1784904034.678:210): avc: denied { open } for pid=1206 comm="syz.3.218" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.996918][ T28] audit: type=1400 audit(1784904034.678:211): avc: denied { ioctl } for pid=1206 comm="syz.3.218" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x700b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 86.021840][ T28] audit: type=1400 audit(1784904034.738:212): avc: denied { create } for pid=1208 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.041131][ T28] audit: type=1400 audit(1784904034.738:213): avc: denied { connect } for pid=1208 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.060667][ T28] audit: type=1400 audit(1784904034.738:214): avc: denied { write } for pid=1208 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.158830][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 86.165274][ T19] usb 2-1: unable to get BOS descriptor or descriptor too short [ 86.177742][ T19] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 136, changing to 7 [ 86.196010][ T19] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.211513][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.224651][ T19] usb 2-1: Product: syz [ 86.231962][ T19] usb 2-1: Manufacturer: syz [ 86.268678][ T19] usb 2-1: SerialNumber: syz [ 86.395956][ T1222] xt_nat: multiple ranges no longer supported [ 86.819058][ T551] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 86.948342][ T1227] device bridge0 entered promiscuous mode [ 87.003378][ T1227] device vlan2 entered promiscuous mode [ 87.312317][ T551] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 87.379925][ T551] usb 4-1: can't read configurations, error -71 [ 87.520742][ T19] usb 2-1: found format II with max.bitrate = 4089, frame size=10 [ 87.528595][ T19] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 87.549065][ T19] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 87.562131][ T19] usb 2-1: USB disconnect, device number 3 [ 87.583320][ T1238] loop1: detected capacity change from 0 to 256 [ 87.782499][ T355] udevd[355]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.977133][ T1242] loop1: detected capacity change from 0 to 512 [ 87.990208][ T1246] loop3: detected capacity change from 0 to 256 [ 87.993711][ T1248] loop4: detected capacity change from 0 to 512 [ 88.003561][ T1246] exfat: Deprecated parameter 'utf8' [ 88.017607][ T1242] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 88.025435][ T1246] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 88.040137][ T28] audit: type=1400 audit(1784904036.778:215): avc: denied { ioctl } for pid=1241 comm="syz.1.229" path="/40/file1/file1" dev="loop1" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.083704][ T288] EXT4-fs (loop1): unmounting filesystem. [ 88.093609][ T1248] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 88.102726][ T1248] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.139669][ T28] audit: type=1400 audit(1784904036.878:216): avc: denied { append } for pid=1247 comm="syz.4.232" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.163371][ T28] audit: type=1400 audit(1784904036.878:217): avc: denied { map } for pid=1247 comm="syz.4.232" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.198381][ T1248] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.232: corrupted inode contents [ 88.219882][ T1248] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #2: comm syz.4.232: mark_inode_dirty error [ 88.291110][ T1248] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.232: Invalid block bitmap block 0 in block_group 0 [ 88.315057][ T1248] EXT4-fs error (device loop4): __ext4_get_inode_loc:4522: comm syz.4.232: Invalid inode table block 0 in block_group 0 [ 88.602987][ T1248] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 88.624220][ T1248] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #2: comm syz.4.232: mark_inode_dirty error [ 88.639648][ T1248] EXT4-fs error (device loop4): __ext4_get_inode_loc:4522: comm syz.4.232: Invalid inode table block 0 in block_group 0 [ 88.653004][ T1248] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 88.663070][ T1248] EXT4-fs error (device loop4): ext4_mkdir:3087: inode #18: comm syz.4.232: mark_inode_dirty error [ 88.674458][ T1248] EXT4-fs error (device loop4): __ext4_get_inode_loc:4522: comm syz.4.232: Invalid inode table block 0 in block_group 0 [ 88.687601][ T1248] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 88.727208][ T28] audit: type=1400 audit(1784904037.458:218): avc: denied { create } for pid=1256 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.799755][ T290] EXT4-fs (loop4): unmounting filesystem. [ 89.580992][ T1263] syz.0.236 uses obsolete (PF_INET,SOCK_PACKET) [ 90.067002][ T19] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 91.241390][ T19] usb 4-1: config 0 interface 0 altsetting 95 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 91.258189][ T19] usb 4-1: config 0 interface 0 altsetting 95 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.275833][ T19] usb 4-1: config 0 interface 0 has no altsetting 0 [ 91.658260][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 91.658279][ T28] audit: type=1400 audit(1784904040.388:224): avc: denied { read } for pid=1329 comm="syz.4.260" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.685661][ T19] usb 4-1: New USB device found, idVendor=1b96, idProduct=0014, bcdDevice= 0.00 [ 91.696000][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.698603][ T1331] binder_alloc: binder_alloc_mmap_handler: 1329 200000ffe000-200001000000 already mapped failed -16 [ 91.705510][ T28] audit: type=1400 audit(1784904040.418:225): avc: denied { open } for pid=1329 comm="syz.4.260" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.748564][ T28] audit: type=1400 audit(1784904040.438:226): avc: denied { map } for pid=1329 comm="syz.4.260" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.748770][ T19] usb 4-1: config 0 descriptor?? [ 91.777619][ T1285] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.851136][ T1337] xt_CT: No such helper "netbios-ns" [ 91.881428][ T1337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3594 sclass=netlink_route_socket pid=1337 comm=syz.1.261 [ 91.988920][ T312] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 91.996733][ T28] audit: type=1326 audit(1784904040.608:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1332 comm="syz.1.261" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3879de99 code=0x7ffc0000 [ 92.069066][ T28] audit: type=1326 audit(1784904040.608:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1332 comm="syz.1.261" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3879de99 code=0x7ffc0000 [ 92.095381][ T28] audit: type=1326 audit(1784904040.608:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1332 comm="syz.1.261" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3879de99 code=0x7ffc0000 [ 92.120426][ T28] audit: type=1326 audit(1784904040.608:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1332 comm="syz.1.261" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3879de99 code=0x7ffc0000 [ 92.145528][ T28] audit: type=1326 audit(1784904040.608:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1332 comm="syz.1.261" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f9e3879de99 code=0x7ffc0000 [ 92.170206][ T28] audit: type=1326 audit(1784904040.608:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1332 comm="syz.1.261" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3879de99 code=0x7ffc0000 [ 92.195505][ T28] audit: type=1326 audit(1784904040.608:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1332 comm="syz.1.261" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3879de99 code=0x7ffc0000 [ 92.196386][ T19] ntrig 0003:1B96:0014.0001: item fetching failed at offset 7/40 [ 92.230705][ T19] ntrig 0003:1B96:0014.0001: parse failed [ 92.236462][ T19] ntrig: probe of 0003:1B96:0014.0001 failed with error -22 [ 92.414770][ T60] usb 4-1: USB disconnect, device number 5 [ 92.758482][ T1343] loop4: detected capacity change from 0 to 512 [ 92.766971][ T1343] EXT4-fs: Ignoring removed orlov option [ 93.098996][ T1343] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.262193][ T1343] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 93.272333][ T1343] EXT4-fs (loop4): orphan cleanup on readonly fs [ 93.279973][ T1343] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.262: inode #1: comm syz.4.262: iget: illegal inode # [ 93.293756][ T1343] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.262: error while reading EA inode 1 err=-117 [ 93.306929][ T1343] EXT4-fs (loop4): 1 orphan inode deleted [ 93.312740][ T1343] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 93.406960][ T1348] loop1: detected capacity change from 0 to 512 [ 93.426057][ T1348] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.468183][ T1348] EXT4-fs (loop1): 1 truncate cleaned up [ 93.474251][ T1348] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 93.688244][ T1375] xt_CT: No such helper "netbios-ns" [ 93.718392][ T1375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3594 sclass=netlink_route_socket pid=1375 comm=syz.2.275 [ 94.699481][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.706807][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.749639][ C1] Illegal XDP return value 16128 on prog (id 8) dev veth1_to_bridge, expect packet loss! [ 94.763226][ T1096] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 94.797506][ T1096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.800333][ T312] usb 5-1: unable to get BOS descriptor or descriptor too short [ 94.809894][ T1380] loop3: detected capacity change from 0 to 512 [ 94.818686][ T1096] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 94.827912][ T1096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.827930][ T290] EXT4-fs (loop4): unmounting filesystem. [ 94.836505][ T312] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 94.844165][ T288] EXT4-fs (loop1): unmounting filesystem. [ 94.850948][ T312] usb 5-1: can't read configurations, error -71 [ 94.862295][ T1096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.870692][ T1096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.878932][ T1096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.887210][ T1096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.913790][ T1380] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 94.933647][ T1380] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.955424][ T1380] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #2: comm syz.3.277: corrupted inode contents [ 94.969765][ T1380] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #2: comm syz.3.277: mark_inode_dirty error [ 94.982313][ T1380] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #2: comm syz.3.277: corrupted inode contents [ 94.994273][ T1380] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.277: mark_inode_dirty error [ 95.006200][ T1380] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz.3.277: Invalid inode table block 0 in block_group 0 [ 95.019058][ T1380] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 95.028705][ T1380] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #2: comm syz.3.277: mark_inode_dirty error [ 95.041659][ T1380] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz.3.277: Invalid inode table block 0 in block_group 0 [ 95.057293][ T1380] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 95.069484][ T1380] EXT4-fs error (device loop3): ext4_mkdir:3087: inode #18: comm syz.3.277: mark_inode_dirty error [ 95.082118][ T1380] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 95.155813][ T287] EXT4-fs (loop3): unmounting filesystem. [ 95.207124][ T1405] SELinux: failed to load policy [ 95.238865][ T312] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.431258][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.448866][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.468736][ T312] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 95.479090][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.487954][ T312] usb 5-1: config 0 descriptor?? [ 95.646033][ T1411] loop3: detected capacity change from 0 to 131072 [ 95.653983][ T1411] F2FS-fs (loop3): invalid crc value [ 95.662061][ T1411] F2FS-fs (loop3): Found nat_bits in checkpoint [ 95.694532][ T1411] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 95.718886][ T321] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.903681][ T312] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 95.911452][ T312] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 95.950242][ T312] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 95.957807][ T312] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 95.966182][ T312] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 96.028592][ T312] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 97.143029][ T321] usb 2-1: unable to get BOS descriptor or descriptor too short [ 97.160104][ T321] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 97.167678][ T321] usb 2-1: can't read configurations, error -71 [ 97.182394][ T897] usb 5-1: USB disconnect, device number 5 [ 97.238707][ T1445] fido_id[1445]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 98.671271][ T28] kauditd_printk_skb: 289 callbacks suppressed [ 98.671287][ T28] audit: type=1400 audit(1784904047.398:523): avc: denied { bind } for pid=1492 comm="syz.0.319" lport=250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.700757][ T28] audit: type=1400 audit(1784904047.398:524): avc: denied { name_bind } for pid=1492 comm="syz.0.319" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 98.764101][ T28] audit: type=1400 audit(1784904047.398:525): avc: denied { node_bind } for pid=1492 comm="syz.0.319" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 98.865134][ T28] audit: type=1400 audit(1784904047.528:526): avc: denied { connect } for pid=1480 comm="syz.1.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.924979][ T1511] loop1: detected capacity change from 0 to 512 [ 98.935757][ T28] audit: type=1400 audit(1784904047.568:527): avc: denied { setopt } for pid=1505 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.971213][ T1511] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 99.001993][ T1511] EXT4-fs (loop1): 1 truncate cleaned up [ 99.008778][ T28] audit: type=1400 audit(1784904047.588:528): avc: denied { bind } for pid=1505 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.028087][ T1511] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 99.058015][ T28] audit: type=1400 audit(1784904047.598:529): avc: denied { create } for pid=1507 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 99.077643][ T28] audit: type=1400 audit(1784904047.628:530): avc: denied { sys_admin } for pid=1507 comm="syz.0.325" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 99.186366][ T28] audit: type=1400 audit(1784904047.628:531): avc: denied { remount } for pid=1507 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 99.215425][ T28] audit: type=1400 audit(1784904047.648:532): avc: denied { associate } for pid=1509 comm="syz.0.325" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 99.564428][ T1541] overlayfs: failed to resolve './file0': -2 [ 99.758162][ T288] EXT4-fs (loop1): unmounting filesystem. [ 99.934283][ T1532] loop3: detected capacity change from 0 to 131072 [ 99.945091][ T1532] F2FS-fs (loop3): Test dummy encryption mode enabled [ 99.954979][ T1532] F2FS-fs (loop3): invalid crc value [ 100.362567][ T1532] F2FS-fs (loop3): Found nat_bits in checkpoint [ 100.393496][ T1532] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 100.422166][ T1532] fscrypt: AES-256-XTS using blk-crypto-fallback [ 100.493567][ T1587] loop1: detected capacity change from 0 to 512 [ 100.507574][ T1587] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.519545][ T1587] EXT4-fs (loop1): 1 truncate cleaned up [ 100.525196][ T1587] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 100.628937][ T60] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 100.655940][ T1596] loop3: detected capacity change from 0 to 512 [ 100.670565][ T1596] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 100.679571][ T1596] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.694745][ T1596] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #2: comm syz.3.357: corrupted inode contents [ 100.706762][ T1596] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #2: comm syz.3.357: mark_inode_dirty error [ 100.718272][ T1596] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #2: comm syz.3.357: corrupted inode contents [ 100.730088][ T1596] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.357: mark_inode_dirty error [ 100.773159][ T10] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 100.787022][ T287] EXT4-fs (loop3): unmounting filesystem. [ 100.810257][ T60] usb 5-1: unable to get BOS descriptor or descriptor too short [ 100.819820][ T60] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 100.831223][ T287] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 100.836118][ T60] usb 5-1: string descriptor 0 read error: -22 [ 100.846769][ T287] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 100.862163][ T287] EXT4-fs error (device loop3): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 100.890271][ T60] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 100.899566][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.331055][ T288] EXT4-fs (loop1): unmounting filesystem. [ 101.468558][ T1609] 9pnet_fd: Insufficient options for proto=fd [ 101.746472][ T1602] loop3: detected capacity change from 0 to 131072 [ 101.769356][ T60] usb 5-1: USB disconnect, device number 6 [ 101.773846][ T1602] F2FS-fs (loop3): Test dummy encryption mode enabled [ 101.783668][ T1602] F2FS-fs (loop3): invalid crc value [ 101.798791][ T1602] F2FS-fs (loop3): Found nat_bits in checkpoint [ 101.834296][ T1602] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 101.856618][ T1602] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 102.063141][ T355] udevd[355]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.821220][ T1630] loop4: detected capacity change from 0 to 512 [ 102.918704][ T1630] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 102.944012][ T1630] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.992767][ T1630] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.368: corrupted inode contents [ 103.007248][ T1630] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #2: comm syz.4.368: mark_inode_dirty error [ 103.025476][ T1630] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.368: corrupted inode contents [ 103.573199][ T1630] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.368: mark_inode_dirty error [ 104.102083][ T1651] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.109350][ T1651] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.342894][ T1630] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.368: Freeing blocks not in datazone - block = 22, count = 1 [ 104.447856][ T1658] 9pnet_fd: Insufficient options for proto=fd [ 104.488383][ T1630] EXT4-fs error (device loop4): __ext4_get_inode_loc:4522: comm syz.4.368: Invalid inode table block 0 in block_group 0 [ 104.552126][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 104.552147][ T28] audit: type=1400 audit(1784904053.288:535): avc: denied { read } for pid=1654 comm="syz.3.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.613286][ T1660] loop1: detected capacity change from 0 to 1024 [ 104.626008][ T1660] EXT4-fs: Ignoring removed orlov option [ 104.632858][ T1630] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 104.645129][ T1630] EXT4-fs error (device loop4): ext4_mkdir:3087: inode #18: comm syz.4.368: mark_inode_dirty error [ 104.656114][ T1660] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.662609][ T1630] EXT4-fs error (device loop4): __ext4_get_inode_loc:4522: comm syz.4.368: Invalid inode table block 0 in block_group 0 [ 104.672065][ T1660] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.675400][ T1630] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 104.692841][ T1664] loop3: detected capacity change from 0 to 512 [ 104.697255][ T1630] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 104.718025][ T1664] EXT4-fs: Ignoring removed i_version option [ 104.718764][ T290] EXT4-fs (loop4): unmounting filesystem. [ 104.737783][ T1664] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.750946][ T1660] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 104.761090][ T1664] EXT4-fs (loop3): 1 truncate cleaned up [ 104.773459][ T1664] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 104.782648][ T288] EXT4-fs (loop1): unmounting filesystem. [ 104.858522][ T1684] loop1: detected capacity change from 0 to 512 [ 104.884717][ T1684] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 104.901490][ T1684] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0102] [ 104.913375][ T1684] EXT4-fs (loop1): orphan cleanup on readonly fs [ 104.924544][ T1684] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.386: attempt to clear invalid blocks 1024 len 1 [ 104.945724][ T1684] EXT4-fs (loop1): Remounting filesystem read-only [ 104.957875][ T1684] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.386: bg 0: block 361: padding at end of block bitmap is not set [ 104.972963][ T1684] EXT4-fs (loop1): Remounting filesystem read-only [ 104.987746][ T1684] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 104.999963][ T1684] EXT4-fs (loop1): Remounting filesystem read-only [ 105.007636][ T1684] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.386: invalid indirect mapped block 1811939328 (level 0) [ 105.022238][ T1684] EXT4-fs (loop1): Remounting filesystem read-only [ 105.028958][ T1684] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.386: invalid indirect mapped block 2185560079 (level 1) [ 105.043239][ T1684] EXT4-fs (loop1): Remounting filesystem read-only [ 105.050054][ T1684] EXT4-fs (loop1): 1 truncate cleaned up [ 105.055780][ T1684] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 105.102051][ T28] audit: type=1400 audit(1784904053.838:536): avc: denied { mounton } for pid=1683 comm="syz.1.386" path="/72/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.153029][ T28] audit: type=1400 audit(1784904053.868:537): avc: denied { remount } for pid=1683 comm="syz.1.386" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 105.173617][ T1589] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 7168: padding at end of block bitmap is not set [ 105.195030][ T19] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 105.205166][ T288] EXT4-fs (loop1): unmounting filesystem. [ 105.244625][ T1707] loop1: detected capacity change from 0 to 1024 [ 105.268286][ T1707] EXT4-fs: Ignoring removed bh option [ 105.309591][ T1707] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 105.354719][ T28] audit: type=1400 audit(1784904054.088:538): avc: denied { map } for pid=1706 comm="syz.1.395" path="/73/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.398892][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 105.405663][ T19] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 105.414674][ T288] EXT4-fs (loop1): unmounting filesystem. [ 105.434138][ T19] usb 5-1: config 0 has no interface number 0 [ 105.458349][ T28] audit: type=1400 audit(1784904054.118:539): avc: denied { execute } for pid=1706 comm="syz.1.395" path="/73/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.461693][ T19] usb 5-1: config 0 interface 184 has no altsetting 0 [ 105.516620][ T19] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 105.534495][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.562856][ T19] usb 5-1: Product: syz [ 105.578842][ T19] usb 5-1: Manufacturer: syz [ 105.588685][ T19] usb 5-1: SerialNumber: syz [ 105.610516][ T19] usb 5-1: config 0 descriptor?? [ 105.623649][ T1720] loop1: detected capacity change from 0 to 1024 [ 105.635463][ T19] smsc75xx v1.0.0 [ 105.650493][ T1720] EXT4-fs: Invalid want_extra_isize 123 [ 105.670596][ T310] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.679366][ T1664] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.379: corrupted xattr entries [ 105.711980][ T1722] loop1: detected capacity change from 0 to 512 [ 105.719321][ T1664] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.379: corrupted xattr entries [ 105.746433][ T1664] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.379: corrupted xattr entries [ 105.768636][ T1664] EXT4-fs error (device loop3) in ext4_setattr:5697: Corrupt filesystem [ 105.792950][ T287] EXT4-fs (loop3): unmounting filesystem. [ 105.793371][ T1722] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 105.848043][ T1722] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.902581][ T1722] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.402: corrupted inode contents [ 105.930588][ T1722] EXT4-fs error (device loop1): ext4_dirty_inode:6158: inode #2: comm syz.1.402: mark_inode_dirty error [ 105.942123][ T1722] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.402: corrupted inode contents [ 105.954059][ T1722] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.402: mark_inode_dirty error [ 105.978623][ T288] EXT4-fs (loop1): unmounting filesystem. [ 106.131206][ T1743] netlink: 96 bytes leftover after parsing attributes in process `syz.1.409'. [ 106.166630][ T1745] loop1: detected capacity change from 0 to 4096 [ 106.208112][ T1748] device erspan0 entered promiscuous mode [ 106.214309][ T1748] device macsec1 entered promiscuous mode [ 106.345450][ T1745] EXT4-fs: Ignoring removed oldalloc option [ 106.387131][ T1745] EXT4-fs (loop1): Test dummy encryption mode enabled [ 106.637479][ T1745] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002] [ 106.656608][ T1745] System zones: 0-5 [ 107.176931][ T19] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 107.188311][ T19] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 107.208464][ T1745] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 107.248742][ T1745] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 107.263718][ T28] audit: type=1400 audit(1784904055.998:540): avc: denied { write } for pid=1744 comm="syz.1.410" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 107.298325][ T28] audit: type=1400 audit(1784904056.028:541): avc: denied { add_name } for pid=1744 comm="syz.1.410" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 107.330672][ T288] EXT4-fs (loop1): unmounting filesystem. [ 107.332919][ T1764] loop3: detected capacity change from 0 to 4096 [ 107.345424][ T28] audit: type=1400 audit(1784904056.028:542): avc: denied { remove_name } for pid=1744 comm="syz.1.410" name="#7" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 107.367804][ T28] audit: type=1400 audit(1784904056.028:543): avc: denied { rename } for pid=1744 comm="syz.1.410" name="#7" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 107.390165][ T1764] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 107.426303][ T1764] EXT4-fs (loop3): Test dummy encryption mode enabled [ 107.436080][ T28] audit: type=1400 audit(1784904056.028:544): avc: denied { unlink } for pid=1744 comm="syz.1.410" name="#7" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 107.468942][ T1764] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 107.483299][ T1764] System zones: 0-5 [ 107.490195][ T1769] loop1: detected capacity change from 0 to 512 [ 107.496730][ T1769] EXT4-fs: Ignoring removed i_version option [ 107.503091][ T1764] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 107.512017][ T1769] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.536026][ T287] EXT4-fs (loop3): unmounting filesystem. [ 107.542077][ T1769] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.416: invalid indirect mapped block 4294967295 (level 1) [ 107.558597][ T1769] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.416: invalid indirect mapped block 4294967295 (level 1) [ 107.599215][ T1769] EXT4-fs (loop1): 2 truncates cleaned up [ 107.604967][ T1769] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 107.658254][ T288] EXT4-fs (loop1): unmounting filesystem. [ 107.832858][ T19] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 107.882841][ T19] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 107.903458][ T19] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 107.922634][ T19] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 108.847386][ T19] usb 5-1: USB disconnect, device number 7 [ 108.968046][ T1803] device erspan0 entered promiscuous mode [ 108.978931][ T1803] device macsec1 entered promiscuous mode [ 109.257236][ T1824] loop3: detected capacity change from 0 to 512 [ 109.320842][ T1824] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.337896][ T1824] EXT4-fs (loop3): 1 truncate cleaned up [ 109.344032][ T1824] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 109.819446][ T1839] loop1: detected capacity change from 0 to 512 [ 109.850425][ T1839] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 109.859462][ T1839] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.877522][ T1839] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.444: corrupted inode contents [ 109.889540][ T1839] EXT4-fs error (device loop1): ext4_dirty_inode:6158: inode #2: comm syz.1.444: mark_inode_dirty error [ 109.901044][ T1839] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.444: corrupted inode contents [ 109.914963][ T1839] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.444: mark_inode_dirty error [ 109.935586][ T288] EXT4-fs (loop1): unmounting filesystem. [ 109.949505][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 109.949517][ T28] audit: type=1400 audit(1784904058.688:551): avc: denied { mounton } for pid=1844 comm="syz.1.446" path="/90/file0" dev="tmpfs" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 109.993799][ T1849] loop1: detected capacity change from 0 to 512 [ 110.010703][ T1849] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 110.019737][ T1849] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.037950][ T288] EXT4-fs (loop1): unmounting filesystem. [ 110.231902][ T287] EXT4-fs (loop3): unmounting filesystem. [ 110.499072][ T1861] loop3: detected capacity change from 0 to 40427 [ 110.507109][ T1861] F2FS-fs (loop3): Invalid log_blocksize (64), supports only 12 [ 110.526961][ T1861] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 110.538925][ T1861] F2FS-fs (loop3): heap/no_heap options were deprecated [ 110.559042][ T1861] F2FS-fs (loop3): invalid crc value [ 110.569773][ T1861] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 110.605218][ T1861] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 110.612340][ T1861] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 110.644803][ T1861] syz.3.452: attempt to access beyond end of device [ 110.644803][ T1861] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 110.671193][ T287] syz-executor: attempt to access beyond end of device [ 110.671193][ T287] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 110.890185][ T1875] loop3: detected capacity change from 0 to 512 [ 110.929158][ T1875] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 110.938429][ T1875] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.961204][ T1875] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #2: comm syz.3.457: corrupted inode contents [ 110.979797][ T1875] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #2: comm syz.3.457: mark_inode_dirty error [ 111.004906][ T1875] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #2: comm syz.3.457: corrupted inode contents [ 111.019785][ T1875] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.457: mark_inode_dirty error [ 111.039671][ T1889] overlayfs: failed to clone upperpath [ 111.086156][ T287] EXT4-fs (loop3): unmounting filesystem. [ 111.357092][ T1915] xt_nat: multiple ranges no longer supported [ 112.405922][ T1923] loop4: detected capacity change from 0 to 512 [ 112.788924][ T28] audit: type=1400 audit(1784904061.518:552): avc: denied { setopt } for pid=1916 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 112.913158][ T1923] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 112.914103][ T1936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.482'. [ 112.922220][ T1923] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.940665][ T1938] capability: warning: `syz.0.483' uses deprecated v2 capabilities in a way that may be insecure [ 112.978943][ T28] audit: type=1400 audit(1784904061.698:553): avc: denied { create } for pid=1937 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.003144][ T1923] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.478: corrupted inode contents [ 113.020529][ T1923] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #2: comm syz.4.478: mark_inode_dirty error [ 113.031901][ T28] audit: type=1400 audit(1784904061.758:554): avc: denied { ioctl } for pid=1942 comm="syz.0.485" path="socket:[20187]" dev="sockfs" ino=20187 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.037707][ T1947] loop1: detected capacity change from 0 to 512 [ 113.065802][ T1923] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.478: corrupted inode contents [ 113.078543][ T1923] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.478: mark_inode_dirty error [ 113.091346][ T1947] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.113755][ T1947] EXT4-fs (loop1): 1 truncate cleaned up [ 113.124677][ T1947] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 113.134426][ T290] EXT4-fs (loop4): unmounting filesystem. [ 113.189860][ T1960] SELinux: failed to load policy [ 113.198882][ C0] ================================================================== [ 113.206966][ C0] BUG: KASAN: use-after-free in rcu_segcblist_enqueue+0x9c/0xb0 [ 113.214615][ C0] Write of size 8 at addr ffff8881337c9590 by task syz.3.475/1916 [ 113.222423][ C0] [ 113.224758][ C0] CPU: 0 PID: 1916 Comm: syz.3.475 Not tainted syzkaller #0 [ 113.232043][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 113.242119][ C0] Call Trace: [ 113.245404][ C0] [ 113.248336][ C0] __dump_stack+0x21/0x24 [ 113.252675][ C0] dump_stack_lvl+0x110/0x170 [ 113.257355][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 113.262390][ C0] ? rcu_segcblist_enqueue+0x9c/0xb0 [ 113.267669][ C0] print_address_description+0x71/0x200 [ 113.273200][ C0] print_report+0x4a/0x60 [ 113.277514][ C0] kasan_report+0x122/0x150 [ 113.282006][ C0] ? rcu_segcblist_enqueue+0x9c/0xb0 [ 113.287274][ C0] __asan_report_store8_noabort+0x17/0x20 [ 113.292973][ C0] rcu_segcblist_enqueue+0x9c/0xb0 [ 113.298069][ C0] call_rcu+0x554/0xf50 [ 113.302222][ C0] ? __cfi_call_rcu+0x10/0x10 [ 113.306880][ C0] ? __kasan_check_write+0x14/0x20 [ 113.311970][ C0] ? refcount_dec_not_one+0x130/0x1b0 [ 113.317327][ C0] ? __cfi_refcount_dec_not_one+0x10/0x10 [ 113.323030][ C0] __put_cred+0xf4/0x150 [ 113.327258][ C0] exit_creds+0xf1/0x170 [ 113.331479][ C0] __put_task_struct+0x121/0x3e0 [ 113.336399][ C0] ? delayed_put_task_struct+0x64/0x1c0 [ 113.341932][ C0] delayed_put_task_struct+0x6c/0x1c0 [ 113.347288][ C0] ? __cfi_delayed_put_task_struct+0x10/0x10 [ 113.353255][ C0] rcu_do_batch+0x52b/0xc30 [ 113.357738][ C0] ? rcu_core+0xf00/0xf00 [ 113.362050][ C0] rcu_core+0x486/0xf00 [ 113.366184][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 113.371367][ C0] ? sched_clock+0x9/0x10 [ 113.375699][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 113.380874][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 113.386057][ C0] ? irqtime_account_irq+0x75/0x240 [ 113.391241][ C0] rcu_core_si+0x9/0x10 [ 113.395381][ C0] handle_softirqs+0x1d7/0x600 [ 113.400134][ C0] __irq_exit_rcu+0x52/0xf0 [ 113.404627][ C0] irq_exit_rcu+0x9/0x10 [ 113.408850][ C0] sysvec_apic_timer_interrupt+0x58/0xc0 [ 113.414476][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 113.420458][ C0] RIP: 0033:0x7f78fae72527 [ 113.424860][ C0] Code: 03 14 ef 80 3d a1 58 3b 00 00 49 89 d6 48 89 d3 74 28 25 ff 0f 00 00 83 f0 3d 8d 04 c0 89 c3 c1 eb 04 31 c3 69 db 2d eb d4 27 <89> d8 c1 e8 0f 31 c3 81 e3 ff 0f 00 00 48 31 d3 80 3d 0a fb 3a 00 [ 113.444907][ C0] RSP: 002b:00007ffde168a1d0 EFLAGS: 00000a87 [ 113.450972][ C0] RAX: 0000000000006978 RBX: 0000000081c01203 RCX: ffffffff8239763e [ 113.458927][ C0] RDX: ffffffff82397b8c RSI: ffffffff8239763e RDI: 00007f78fa9ff008 [ 113.466880][ C0] RBP: 0000000000000000 R08: 00007f78fb210000 R09: 00007f78fb212000 [ 113.474831][ C0] R10: 0000000082397642 R11: 0000000000000007 R12: 00007f78fb226038 [ 113.482784][ C0] R13: 0000000000054bd0 R14: ffffffff82397b8c R15: 00007f78fbd55720 [ 113.490744][ C0] ? security_sock_rcv_skb+0x8c/0xb0 [ 113.496019][ C0] ? security_socket_sendmsg+0x6e/0xb0 [ 113.501465][ C0] ? security_sock_rcv_skb+0x8c/0xb0 [ 113.506735][ C0] ? security_socket_sendmsg+0x6e/0xb0 [ 113.512191][ C0] [ 113.515203][ C0] [ 113.517511][ C0] Allocated by task 1943: [ 113.521909][ C0] kasan_set_track+0x4b/0x70 [ 113.526499][ C0] kasan_save_alloc_info+0x1f/0x30 [ 113.531598][ C0] __kasan_kmalloc+0x95/0xb0 [ 113.536174][ C0] __kmalloc+0xb4/0x1e0 [ 113.540315][ C0] l2tp_session_create+0x38/0xbd0 [ 113.545321][ C0] pppol2tp_connect+0xbf5/0x1640 [ 113.550240][ C0] __sys_connect+0x3da/0x460 [ 113.554810][ C0] __x64_sys_connect+0x7a/0x90 [ 113.559554][ C0] x64_sys_call+0x88d/0x9a0 [ 113.564048][ C0] do_syscall_64+0x4c/0xa0 [ 113.568565][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.575329][ C0] [ 113.577734][ C0] Freed by task 386: [ 113.581611][ C0] kasan_set_track+0x4b/0x70 [ 113.586193][ C0] kasan_save_free_info+0x2b/0x40 [ 113.591203][ C0] ____kasan_slab_free+0x132/0x180 [ 113.596310][ C0] __kasan_slab_free+0x11/0x20 [ 113.601060][ C0] slab_free_freelist_hook+0xc2/0x190 [ 113.606432][ C0] __kmem_cache_free+0xb7/0x1b0 [ 113.611312][ C0] kfree+0x6f/0xf0 [ 113.615035][ C0] l2tp_session_put+0xaf/0x1a0 [ 113.619799][ C0] l2tp_session_delete+0x3df/0x4d0 [ 113.624915][ C0] l2tp_tunnel_del_work+0x199/0x410 [ 113.630100][ C0] process_one_work+0x717/0xc30 [ 113.634934][ C0] worker_thread+0xa4d/0x11d0 [ 113.639597][ C0] kthread+0x281/0x320 [ 113.643652][ C0] ret_from_fork+0x1f/0x30 [ 113.648062][ C0] [ 113.650392][ C0] Last potentially related work creation: [ 113.656086][ C0] kasan_save_stack+0x3a/0x60 [ 113.660753][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 113.666107][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 113.671894][ C0] call_rcu+0xcf/0xf50 [ 113.675947][ C0] pppol2tp_release+0x1e3/0x2b0 [ 113.680873][ C0] sock_close+0xc9/0x220 [ 113.685100][ C0] __fput+0x1fd/0x8f0 [ 113.689065][ C0] ____fput+0x15/0x20 [ 113.693032][ C0] task_work_run+0x1e1/0x250 [ 113.697605][ C0] do_exit+0xaf2/0x2850 [ 113.701750][ C0] __cfi___ia32_sys_exit+0x0/0x10 [ 113.706868][ C0] x64_sys_call+0x67/0x9a0 [ 113.711274][ C0] do_syscall_64+0x4c/0xa0 [ 113.715676][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.721559][ C0] [ 113.723860][ C0] The buggy address belongs to the object at ffff8881337c9400 [ 113.723860][ C0] which belongs to the cache kmalloc-512 of size 512 [ 113.737898][ C0] The buggy address is located 400 bytes inside of [ 113.737898][ C0] 512-byte region [ffff8881337c9400, ffff8881337c9600) [ 113.753158][ C0] [ 113.755482][ C0] The buggy address belongs to the physical page: [ 113.761904][ C0] page:ffffea0004cdf200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1337c8 [ 113.772126][ C0] head:ffffea0004cdf200 order:2 compound_mapcount:0 compound_pincount:0 [ 113.780429][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 113.786494][ C0] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00 [ 113.795057][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 113.803614][ C0] page dumped because: kasan: bad access detected [ 113.810003][ C0] page_owner tracks the page as allocated [ 113.815700][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1929, tgid 1927 (syz.2.480), ts 112974707602, free_ts 95219873637 [ 113.837645][ C0] post_alloc_hook+0x1f5/0x210 [ 113.842402][ C0] prep_new_page+0x1c/0x110 [ 113.846905][ C0] get_page_from_freelist+0x2ca9/0x2d20 [ 113.852439][ C0] __alloc_pages+0x1fa/0x610 [ 113.857023][ C0] alloc_slab_page+0x6e/0xf0 [ 113.861591][ C0] new_slab+0x98/0x3e0 [ 113.865639][ C0] ___slab_alloc+0x70f/0xb70 [ 113.870213][ C0] __slab_alloc+0x5e/0xa0 [ 113.874551][ C0] __kmem_cache_alloc_node+0x204/0x2d0 [ 113.879997][ C0] __kmalloc_node_track_caller+0xa1/0x1e0 [ 113.885731][ C0] pskb_expand_head+0x1c2/0x12b0 [ 113.890652][ C0] skb_ensure_writable+0x2f5/0x490 [ 113.895748][ C0] bpf_clone_redirect+0x1d7/0x4a0 [ 113.900758][ C0] 0xffffffffa0002230 [ 113.904725][ C0] bpf_test_run+0x35f/0x940 [ 113.909216][ C0] bpf_prog_test_run_skb+0xafb/0x12f0 [ 113.914582][ C0] page last free stack trace: [ 113.919243][ C0] free_unref_page_prepare+0x80c/0x820 [ 113.924695][ C0] free_unref_page+0x93/0x530 [ 113.929376][ C0] __free_pages+0x67/0x100 [ 113.933799][ C0] __free_slab+0xc7/0x1a0 [ 113.938110][ C0] discard_slab+0x29/0x40 [ 113.942429][ C0] __slab_free+0x201/0x280 [ 113.946845][ C0] ___cache_free+0xbf/0xd0 [ 113.951256][ C0] qlist_free_all+0xc6/0x140 [ 113.955829][ C0] kasan_quarantine_reduce+0x14a/0x170 [ 113.961267][ C0] __kasan_slab_alloc+0x24/0x80 [ 113.966101][ C0] slab_post_alloc_hook+0x4f/0x2d0 [ 113.971198][ C0] kmem_cache_alloc+0x166/0x320 [ 113.976044][ C0] getname_flags+0xba/0x510 [ 113.980528][ C0] __se_sys_newfstatat+0x127/0x440 [ 113.985622][ C0] __x64_sys_newfstatat+0x9b/0xb0 [ 113.990628][ C0] x64_sys_call+0x77c/0x9a0 [ 113.995117][ C0] [ 113.997421][ C0] Memory state around the buggy address: [ 114.003031][ C0] ffff8881337c9480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 114.011071][ C0] ffff8881337c9500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 114.019110][ C0] >ffff8881337c9580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 114.027147][ C0] ^ [ 114.031709][ C0] ffff8881337c9600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 114.039747][ C0] ffff8881337c9680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 114.047781][ C0] ================================================================== [ 114.055817][ C0] Disabling lock debugging due to kernel taint [ 114.078716][ T288] EXT4-fs (loop1): unmounting filesystem. [ 114.110076][ T1969] kvm: pic: single mode not supported [ 114.110087][ T1969] kvm: pic: level sensitive irq not supported [ 114.115820][ T1969] kvm: pic: single mode not supported [ 114.121936][ T1969] kvm: pic: level sensitive irq not supported [ 114.368890][ T321] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 114.559912][ T321] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 114.569965][ T321] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 114.579881][ T321] usb 5-1: config 1 interface 0 has no altsetting 0 [ 114.587929][ T321] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 114.597032][ T321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.605074][ T321] usb 5-1: Product: syz [ 114.609271][ T321] usb 5-1: Manufacturer: syz [ 114.613849][ T321] usb 5-1: SerialNumber: syz [ 114.619477][ T1968] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 114.626625][ T1968] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 114.865669][ T321] rtl8150 5-1:1.0: couldn't reset the device [ 114.871787][ T321] rtl8150: probe of 5-1:1.0 failed with error -5 [ 114.879188][ T321] usb 5-1: USB disconnect, device number 8